XP Os and Zone Alarm

Hi,

I am wondering which little applets connected to the XP Pro OS that try and connect to the internet are necessary. I Have the Zone Alarm program blocking all but the services and controller app. I can not download updates from some vendors. I absolutely do not want my computer going out for automatic updates, or acting as a server.

I will ask it to do so when I wish it.

Can anyone tell me which little applets are necessary to do downloading, of the three or so that are asking to go out there?

I am allowing Outlook Express and my e-mail client through as well as the services and controller app.

I have a second drive with ME on it and I can download just fine with that OS in charge.

Thanks,

desertbluesman

 

Happy reading

 

The term 'act as server' simply means that a web site can interact w/your system. You can block that, but if you want to download something from the site, you must allow the server option. A better way is to shut off any auto updating from a vendor in the app itself. Example: MS auto updates. The options are to: inform you of critical updates and/or auto update. The wise shut off the auto feature. No need to block thru the Firewall. I have a dual boot ME/XP system as well. I run ZA on ME only. My comments apply to both, since I had ZA on XP at one time. This is not an OS issue. If you want to block the MS applet, for example, from launching, the name of the app begins with "services..." (I'm on ME at the moment so can't give you the full name right now).

Regards - Charles

 

That's rather simplistic. Assigning server rights (which is something that, IMO, ZL has never explained particularly thoroughly) enables an application to listen on (or open) ports.

Some applications (IRC and FTP clients, the Nutscrape browser (but not IE)) must be assigned server rights in order to function. Other applications ask for server rights when none are needed!

 

Well Thanks for taking the time to reply,

I do not have to allow any server rights in the ME OS drive, and in fact I deny all of them server rights. Including IE and OE.

In the Zone Alarm Application in the ME Drive there are no rights allowed to anything except for my Browser IE and my e-mail app. (Outlook Express) Yet I can download anything from any site I choose.

I have thought up a solution anyways. I use a RomTec Trios hard drive switch, instead of using that, I am going to use trays and dock bays, that way I can assign a slave drive to the OS drive and save all downloads on the "F" drive, then when I change OS's I will have all of the downloads on that "F" drive.

I use XP Pro and 2kSP3 (on seperate drives) as my OS of choice for Digital Audio Applications, and ME as my OS of choice for Office Art and Internet. So I need a slave drive for audio files only, Which are huge, a half gig for 8 or 9 stereo tracks of audio. I need that extra drive to feed the audio to the CPU without accessing the application drive which can cause a dropout if it polls at the wrong time.

Thanks anyway

dbm

 

Brett,

Your points taken. This is a ZL term/usage never fully explained.

In the the context of the original question, its irrelavent. Whether you give an update app server rights or not, the app's options govern, ie, MS updates. It is the app that initiates contact. This will occur whether server rights are given or not. Giving server rights is not the same as giving permission to download anything, only, just as you described, to listen. So what?

Its been so long that I've thought about this issue, totaly forgot that downloading has nothing to do with it.

My original advice stands: control it throught the app.

Regards - Charles

 

charlesvar, That's good advice, however (you knew there was a however or I wouldn't be here) some applications don't allow such control.

eg, I have MsWorks and every time I run it, it places a call command in the -RUN key of my Directory for wkdetect.exe which is an update checker. Now, here's the hairy part, not only is there no option in the program to prevent this, StartCop can't even prevent it. It overrules StartCop and resets itself active each time I open any MsWorks file. Now, it gets even stranger, a full drive search for the file "wkdetect.exe" comes up empty. I even did a full drive search using "Containing Text" and found nothing in any .inf file or other area that might be germane.

Given that it's slipping in this little useless command for a file that doesn't exist and it going into the -RUN key, so it only runs once and deletes itself, I suppose I'll just have to live with it until I get more information. Strangely enough, it doesn't cause any error such as "File Not Found" or whatever. I know nothing is calling out since the firewall doesn't detact any action.

 

Charles - IMO it is far better to unload unnecessary OS services rather than to try to control those services (many of which are necessary) through the use of a firewall. I suspect that dbm’s attempt at the latter has been the cause of his problems.

Whilst it (generally) isn’t strictly necessary to tinker with default application rules assigned by a firewall, doing so can have its benefits - for example, many people (for obvious reasons) consider it desirable to restrict their mail client’s ability to make HTTP connections.

Zephyr - I think (but could be mistaken) that this key is only recreated if "Check for Updates" is enabled within Works.

BTW, I’m quite surprised (and saddened) that you made no comment in relation to the matter of 2 + 2. Did you miss it?

 

Zephyr:

Yes, always exceptions. Been thru the dance w/MS Works, same actions/ responses, annoying little bugger.


Brett,

Are we talking about OS services? DBM never specifies exactly. We are guessing here.

The point I'm trying to address is the confusion surrounding ZL's use of the "server" terminology. While valid, seems a tad hyped.


Regards - Charles

 

Thanks again,

I am wondering if the XP native firewall is the culprit, as I can download any thing on the 2kSP3 OS. I never used nor configured the XP Pro Firewall, or even thought about it, and it may be on by default.

What I tried to download is the Sonar XL 2.1 upgrade on to my XP Pro OS Drive. It would not do anything to download the update from Cakewalks FTP site (except there was some form of activity on the Zone Alarm Meters, it was not doing a download, there was just short bursts of activity).

Finally I went to my ME Drive and slurped the thing in one try, done as always.

Very interesting replies,

Thanks

dbm

 

Hi DBM,

http://www.windowsbbs.com/showthread.php?s=&threadid=10317

Yes, its easy to overlook ICF.

Regards - Charles

 

Is it only that one download with which you had difficulty?

 

Thanks for your replies,

Yes it is only that one download I tried, I usually stay off of the net with my DAW Drive, as I can not run an Anti Virus App on that drive, but I assume Cakewalks FTP site is clean.

Maybe it is best to just stay off of the net with that drive, and just have a transfer CD to go back and forth with. Or use a slave drive as outlined in above posts, only going on the net with the Norton AV equipped ME OS drive.

dbm

 

My point is, there is NO "Check For Updates" option in MsWorks.

 

Works Task Launcher - Customize - Check for Updates?

 

I've always had that unchecked. Else?

 

Not at the moment

 

This is not an answer but it's a solution

 

Thanks Brett, however, I already use Spybot Residence and it does the same thing as the one you linked. All that takes is an extra click each time but somehow that reminds me that I couldn't lick this monster.
It's just one of those little things I'll have to live with but I'm still left wondering. I does no real harm since the executable file being called for doesn't exist on my drive but then what if they sneak one in there some day? Next thing you know, they'll find out I cheated on my income taxes.

Lies! I tell you lies! (I had a lawyer that used that line once)