TinyWall Firewall

Discussion in 'other firewalls' started by ultim, Oct 12, 2011.

  1. netarchitech

    netarchitech Registered Member

    Joined:
    Jun 19, 2021
    Posts:
    2
    Location:
    NY
    Well, for better or worse, this is my first post :)

    Ultim, I've been having a lot of difficulty lately with WMI Provider Host (wmiprsrv.exe) errors...

    The reason for my post here is that the errors appear to be connected to TinyWall on some level...

    After a considerable amount of time googling, I came across this article that seemed to shed some light on the situation...

    The first place I went for more information was the Win10 Event Viewer. The following screenshot shows what I found there:

    https://i.postimg.cc/bvfKw8M7/202106190933-wmiprsrv-error.jpg

    Not much to go on, but there was a ClientProcessID = 4764, so proceeded to Task Manager to look up the process:

    https://i.postimg.cc/0yjpKwgm/202106190940-wmiprsrv-error2.jpg

    So that establishes a connection and still leaves me with more questions than answers...

    Ultim, I'm hoping you might have more answers than questions...I've grown rather fond of TinyWall...

    I want to thank you for your time and ongoing efforts to provide such an elegant tool...

    I look forward to your reply when you have a chance...Thanks again :)
     
    Last edited: Jun 19, 2021
  2. ultim

    ultim Developer

    Joined:
    Oct 12, 2011
    Posts:
    649
    Location:
    Hungary
    Hi netarchitech!
    The quoted WMI query in the event viewer is used by TinyWall for the "Apply same rules to child processes" feature. I don't know yet why it fails on your computer, and unfortunately Microsoft is also not being very helpful with the "PossibleCause = Unknown" diagnostic.

    If this WMI error is causing trouble for you, please try unticking this option for all your rules. If no rules enable this feature, TinyWall will stop using the query (aside from its initial construction), so that may help.

    If I may ask: How often do you see this error in the event viewer? Does it happen often, for example multiple times every minute? If it happens relatively rarely, every couple of minutes or so, I doubt this could have a perceivable effect on your computer's performance or reliability. Do your problems go away if you uninstall TinyWall? Or is maybe TinyWall just also a victim of the the errors you're tracking down?
     
  3. netarchitech

    netarchitech Registered Member

    Joined:
    Jun 19, 2021
    Posts:
    2
    Location:
    NY
    Hi Ultim!

    Thank you for the reply and the helpful information...

    Unfortunately, it wouldn't be the first time I've experienced errors/difficulties that confounded experts. With that said, I believe I owe you an apology for being an alarmist...Upon stepping through the information you've so kindly provided, I have come to realize the issue was not as prevalent/dire as I once thought...

    How often do you see this error in the event viewer?
    Numerous times at first, but after ordering the results by date/time, just a couple recently...

    Does it happen often, for example multiple times every minute?
    See above...

    Do your problems go away if you uninstall TinyWall?
    No...I haven't gotten to this stage (uninstallation/reinstallation) of the overall process yet...

    Or is maybe TinyWall just also a victim of the the errors you're tracking down?
    It remains a possibility at this point...As a result of further investigation, it appears that TinyWall is not the only program kicking out errors while dealing with WMI...

    Thanks again for your time and attention to this matter...I really appreciate it!
     
  4. AlphaUMi

    AlphaUMi Registered Member

    Joined:
    Jan 23, 2021
    Posts:
    2
    Location:
    127.0.0.1
    Hello, @ultim , have you checked this issue? I'm very exhausted to have to disable the firewall every time I want to start Steam or other apps that are installed on external hard drives, or to have to re-add them every time even if they are whitelisted.
     
  5. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    3,917
    Location:
    Mexico
    TinyWall 3.0.10
    Windows 7 SP1 Professional x86 (brand new installation)

    Connections monitor not displaying any info at all.
    "Show active connections" checked
    "Show blocked apps" checked

    But, as soon as I check "Show open ports" all info gets displayed.
     
  6. g17

    g17 Registered Member

    Joined:
    Sep 30, 2017
    Posts:
    58
    Location:
    MI
    Mr. X - I don't think this is unusual, I believe you are talking about 2 different things.

    Many ports are open and listening on our systems, with no active remote connections or blocked apps.

    If you look, the remote port probably says 0.0.0.0 which is your local computer. This is your computer doing background tasks.

    There are many windows processes and modules that use ports in this way.

    Right now on my system I see modules lsas, wininit, event log and other services under the svchost process.

    Try downloading the free Sysinternals utility called TCPView. It gives a little different look at all the ports in use.
     
  7. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    3,917
    Location:
    Mexico
    Thanks @g17 but I think this time is different.

    I need @ultim to have a look.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.