ICS, I'm on client pc, cant access websites!

Hi all,
please help!
We have home network - server pc without look'n'stop, and my client pc with look'n'stop, imported ICS client rule, and still can't access websites, only homepage google, and I can see search results. Home network is ok.
What do I do?

 

please help, I'm new to LNS!

 

HI,

Welcome to Wilders

Sorry to see your post go by without a reply.

I am not sure what the problem could be with you saying that you can connect to google and search.

Could you check your log file (open L`n`S-> log tab) to see if there are any blocked packets.


- Stem

 

Hello Stem,
thanks for your attention,
Im young mom with lack of time and skills for such complicated matter like firewall tuning

The logfile after I start firefox goes:

Code:

06-07-10,17:13:20  U-0    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:24  U-1    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:24  U-2    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:25  U-3    'APP: Stopped            ' Windows NT Logon Application RUN       C:\WINDOWS\SYSTEM32\WINLOGON.EXE,C:\WINDOWS\SYSTEM32\LSASS.EXE
06-07-10,17:13:30  U-4    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:30  U-5    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:30  U-6    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:30  U-7    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:13:34  U-8    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\ALG.EXE
06-07-10,17:13:34  U-9    'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:38  U+10   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
06-07-10,17:16:39  U+11   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
06-07-10,17:16:41  U+12   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
06-07-10,17:16:41  U+13   'APP: Allowed            ' Windows Explorer   RUN       C:\WINDOWS\EXPLORER.EXE,C:\PROGRAM FILES\MOZILLA FIREFOX\FIREFOX.EXE
06-07-10,17:16:42  U-14   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:42  U-15   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:42  U-16   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:49  U-17   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-18   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-19   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-20   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-21   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-22   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-23   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:50  U-24   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-25   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-26   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-27   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-28   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-29   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-30   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-31   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:51  U-32   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:52  U-33   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:52  U-34   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:52  U-35   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:52  U-36   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:54  U-37   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:55  U-38   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:55  U-39   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:56  U-40   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:16:58  U-41   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:17:00  U-42   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:17:02  U-43   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:17:03  U-44   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:17:03  U-45   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE
06-07-10,17:17:05  U-46   'APP: Stopped            ' Services and Controller app RUN       C:\WINDOWS\SYSTEM32\SERVICES.EXE,C:\WINDOWS\SYSTEM32\SVCHOST.EXE

I'll be really grateful, if you or someone will say what do I need to unblock or such.

Maybe ppl are irritated to see this noobish question like this here, which, maybe, can be answered by reading FAQ or google. But I really have no time for this, and before the baby I would do that, and always did.
Maybe someone with expertise and some free time could help.

 

Hello okpc,

Go into the "Application Filtering" tab and remove from the list "Services.exe" and "svchost.exe" (just select the program in the list, then at the bottom of that window press "Remove")

Then connect out with Firefox, you should then get a popup to allow svchost to connect out to remote port 53 which you should allow.


- Stem

 

I didn't get a popup, it allowed firefox to start without noticing me. What should I do? Or maybe bcos it (firefox) is whitelisted?

But shouldn't I have "Services.exe" and "svchost.exe" blocked in LNS to block applications from using BITS?

 

No you shouldn't, that breaks useful things. What app are you trying to block?

 

There is no white listing in L`n`S.

If you allow svchost outbound, does that then allow you internet access?

If you are not making windows auto updates, then you can disable the bits service (in the windows services).

If you want to block svchost all together, then you would need to make your PC a fixed IP, and disable the DHCP service, then disable the DNS service.


What OS are you using?

 

Corel DRAW, adobe photoshop, Illustrator etc

I meant firefox is in LNS list with "allowed to connect" status

I didn't understand that...

I wanted to disable everything that can transfer information without me knowing (everything that I won't see in LNS)

Im on win XP SP3

And also I saw somewhere, maybe on LNS FAQ or such that best solution for security is having LNS both on server and client. Is that truth?

 

We first need to see why you are being blocked from the internet. I wanted to see if you allowed svchost if that then allowed you internet access.

Go into the windows services and disable the windows DNS client. (at the start menu select "Run", then type services.msc then press "OK". In the services popup window, find the "DNS client entry, right click and select "properties". In the properties window, press "stop" then select "Disabled"





Reboot the PC then try and connect out to the internet, if you cannot, then check the firewall log again.

 

now that I removed system processes from LNS Internet is working fine.
Do I still have to disable DNS Client?
Thanks for help.

 

You can leave the DNS service active if you want. It will only connect to the ICS server(host) for DNS.

Do you have windows auto update service active? as that will make svchost attempt to connect out for windows updates.

 

Well I don't care of "svchost attempt to connect out for windows updates", if only it won't make other applications on my PC make connections without me "seeing" (with LNS) this.

What about having LNS both on server and client?

 

IMHO it would depend on what firewall is currently on the Host. If one is installed and the computer is safe/clean, then why change.

- Stem