Firewall blocks access

I get the following Alert every day now:

"The firewall has blocked access to 207 46 232 182 (UDP Port 123) from your
computer.
Program: "Generic Host Process for Win32 Services"

Should I allow access or not? What is the meaning of this process accessing
the Internet?
Thank you for any help,
Fred.

Big
Fri May 09 00:03:48 PDT 2008

limafred wrote:
> I get the following Alert every day now:
>
> "The firewall has blocked access to 207 46 232 182 (UDP Port 123) from your
> computer.
> Program: "Generic Host Process for Win32 Services"
>
> Should I allow access or not? What is the meaning of this process accessing
> the Internet?
> Thank you for any help,
> Fred.
See http://www.iss.net/security_center/advice/Exploits/Ports/default.htm
for a complete list of ports. 123 is Time. Your computer is probably
trying to do the update of your clock. Not 100% sure but it would be
my gamble. Its a cute feature, but unless your clock chip in your PC
does not keep good time, I would not worry about it.
There is a way to turn that feature off, but for the life of me I can't
find it. I'm sure a google search could pull up help for you.

ReySantos
Fri May 09 00:23:01 PDT 2008

What are you doing when this appeared (on ZoneAlarm?)
svchost.exe is connecting to 207.46.232.182 a Microsft website (to see copy
the URL to IE browser)

SVCHOST.EXE, otherwise known as the Generic Host Process for Win32 Services.
Each time you see a SVCHOST process, it is actually a process that is
managing one or more distinct Windows DLL services. You'll see several
instances of svchost.exe in your task manager.

To determine the services running under a SVCHOST.EXE process using Task List

1. Click on the Start button and then click on the Run menu command.

2. In the Open: field type cmd and press enter.

3. You will now be presented with a console window. At the command prompt
type tasklist /svc and press the enter key. You will see a list of the
processes on your computer as well as the services that SVCHOST.EXE process
is managing. There are 3 columns Image name (look for svchost.exe.), PID
(Port ID look for 123) and the Service it is running.

As is trying to connect to a Microsoft website, I think its legimate, so
Allow.


--
Rey


"limafred" wrote:

> I get the following Alert every day now:
>
> "The firewall has blocked access to 207 46 232 182 (UDP Port 123) from your
> computer.
> Program: "Generic Host Process for Win32 Services"
>
> Should I allow access or not? What is the meaning of this process accessing
> the Internet?
> Thank you for any help,
> Fred.

M
Fri May 09 03:26:18 PDT 2008


"Big Al" <BigAl@nowhere.com> wrote in message
news:oHSUj.3972$Ve.748@trnddc08...
> limafred wrote:
>> I get the following Alert every day now:
>> "The firewall has blocked access to 207 46 232 182 (UDP Port 123) from
>> your computer.
>> Program: "Generic Host Process for Win32 Services"
>> Should I allow access or not? What is the meaning of this process
>> accessing the Internet?
>> Thank you for any help,
>> Fred.
> See http://www.iss.net/security_center/advice/Exploits/Ports/default.htm
> for a complete list of ports. 123 is Time. Your computer is probably
> trying to do the update of your clock. Not 100% sure but it would be my
> gamble. Its a cute feature, but unless your clock chip in your PC does
> not keep good time, I would not worry about it.
> There is a way to turn that feature off, but for the life of me I can't
> find it. I'm sure a google search could pull up help for you.

Although you may be right about the time update, this should not occur every
day unless the clock update is failing. This is quite likely as the default
time servers were reconfigured to support Vista (which has a different time
format (why?)). XP needs to be pointed to an alternate server of which
'time-a.nist.gov' works adequately.

limafred
Fri May 09 11:21:06 PDT 2008

Thank you all for your replies... No longer a problem,
Have a nice week-end,
Fred.

"Rey Santos" wrote:

> What are you doing when this appeared (on ZoneAlarm?)
> svchost.exe is connecting to 207.46.232.182 a Microsft website (to see copy
> the URL to IE browser)
>
> SVCHOST.EXE, otherwise known as the Generic Host Process for Win32 Services.
> Each time you see a SVCHOST process, it is actually a process that is
> managing one or more distinct Windows DLL services. You'll see several
> instances of svchost.exe in your task manager.
>
> To determine the services running under a SVCHOST.EXE process using Task List
>
> 1. Click on the Start button and then click on the Run menu command.
>
> 2. In the Open: field type cmd and press enter.
>
> 3. You will now be presented with a console window. At the command prompt
> type tasklist /svc and press the enter key. You will see a list of the
> processes on your computer as well as the services that SVCHOST.EXE process
> is managing. There are 3 columns Image name (look for svchost.exe.), PID
> (Port ID look for 123) and the Service it is running.
>
> As is trying to connect to a Microsoft website, I think its legimate, so
> Allow.
>
>
> --
> Rey
>
>
> "limafred" wrote:
>
> > I get the following Alert every day now:
> >
> > "The firewall has blocked access to 207 46 232 182 (UDP Port 123) from your
> > computer.
> > Program: "Generic Host Process for Win32 Services"
> >
> > Should I allow access or not? What is the meaning of this process accessing
> > the Internet?
> > Thank you for any help,
> > Fred.