Malware Defender advice

Just need a recommendation
Since so many programs uses svchost.exe to connect to the internet.
I'm wondering if it is a good idea to give it FULL ACCESS to any ip/port

 

with so many progs using it, not allowing full access would break the functionality. Of course, some limitation can be imposed with some firewalls but in the end best to concentrate on not allowing malware on the machine

 

What type of configuration you recommend me me for svchost.exe then

 

Read HERE but ESPECIALLY HERE!

 

Not sure about the sarcasm emoticon, but anyway, here's a starting point if you like:

Really "loosy goosy" rules:

or a bit tightened up ruleset (samples):

It's up to you what you choose to do, but as Cudni advises, it is best to obviously keep malware off in the first place. If you are on a network and sharing files, then you need additional rules as well.

 

Like what? what programs?

svchost.exe on my pc is totally blocked and internet app's works fines.

 

You may think disable DNS Client from Service.

 

Dont mean to hijack this thread, but, i too have a question.

Under the default permissions, i am unable to change the rules. i can only change all of them at once. now i know this wasn't the case in the older versions

 

Here's my MalDef network rules for svchost.exe.
I've had similar rules for every firewall I've eve used.
All other settings (drivers, hooks, etc.) are default.
No probs.
Anything but UDP port 53 lookups to hard coded IP addresses prompt an "Ask" at which point you make a decision.
BTW - I've always used the DNS Client service.
My 2¢ - If you don't use DNS Client then these should be the first three rules for any app used to access the Internet.
All in "Normal" mode, of course.