Windows 7 svchost rules

I think I need a little help creating rules for svchost.exe and windows 7. It seems to want to cinnect to virtually every website I go to. Any basic guidelines in terms of "allow" rules would be appreciated.

 

In what way? The only sites it should be attempting connections to are you DNS server(s) on remote port 53, UDP, maybe a remote DHCP server, port 67, UDP and anything MS related on ports 80 or 443, TCP. Are you using Win 7 firewall.

 

Maybe also local and remote port 123, UDP for time-synch.

Cheers

 

Right, I forgot about time sync The more frequent connections will be from service wuauserv to remote 80 & 443, and DNS to 53.

 

Download L&S trial and have a look at the internet filtering rules. That will give you a head start.

 

Don't forget

Web Service Discovery
LLMNR
Teredo
Generic Protocol 41 tunnel support
UPnP

Some depend if you've disabled IPv6 or not. All I can think of of the top of my head, sure there are others.