Comodo Firewall blocks AOL Active Virus Shield to update [Resolved]

alin2 · February 16, 2007, 5:01pm

I am using COMODO Firewall Pro 2.4.18.184 in Windows XP SP2. As antivirus I have AOL Active Virus Shield 6.0.0.308. I have allowed AOL AVS (avp.exe) full access (in the Application Monitor) in Comodo.
The problem I have is that the firewall blocks the antivirus to update. The security level is set to “Custom”. When the security level is set to “Allow All” the updating is performed without any problems. This is the reason that I think that Comodo blocks this updating process.

Please find below the log from the antivirus:

Selecting update source http://download.newaol.com/avs/update/mirror/ 2/16/2007 6:40:03 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:03 PM
Selecting update source ftp://download.newaol.com/avs/update/mirror/ 2/16/2007 6:40:03 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:03 PM
Selecting update source ftp://dnl-eu5.kaspersky-labs.com 2/16/2007 6:40:03 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://dnl-us4.kaspersky-labs.com 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://dnl-us3.kaspersky-labs.com 2/16/2007 6:40:04 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://dnl-eu5.kaspersky-labs.com 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://dnl-us3.kaspersky-labs.com 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://dnl-us4.kaspersky-labs.com 2/16/2007 6:40:04 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://downloads1.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://downloads5.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://downloads3.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://downloads3.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://downloads4.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source http://downloads2.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: socket not resolved (0x8947701E) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://downloads2.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://downloads4.kaspersky-labs.com/ 2/16/2007 6:40:04 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:04 PM
Selecting update source ftp://downloads1.kaspersky-labs.com/ 2/16/2007 6:40:05 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:05 PM
Selecting update source ftp://downloads5.kaspersky-labs.com/ 2/16/2007 6:40:05 PM
File downloading error: cannot establish connection (0x89477020) cs-0607g.xml 2/16/2007 6:40:06 PM
Update finished with error: cannot establish connection (0x89477020) 2/16/2007 6:40:06 PM

Please help on how to configure Comodo to allow AOL AVS updating.

alin2 · February 17, 2007, 3:11pm

Can anybody help ?

mike6688 · February 17, 2007, 5:45pm

Hi,

Can you post CFP’s logs here after an attempted update of AOL. This will allow us to see if CFP is blocking anything.

Mike

alin2 · February 19, 2007, 12:32pm

Hi,

I have included below the logs of COMODO after I have tried to update AOL Active Virus Shield. I have allowed full access to AOL AVS (avp.exe) in the application monitor. When I use the “Allow All” protection level in COMODO then the update is performed without any problems.

Thank you very much.

Date/Time :2007-02-19 11:22:56
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.114, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.114:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:56
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.36, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.36:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.8, Port = 631)
Protocol: UDP Incoming
Source: 194.102.62.8:631
Destination: 194.102.62.255:631
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:45
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.21, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.21:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:45
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:43
Severity :Medium
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:194.102.62.1: :dns(53))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: UDP Out
Destination: 194.102.62.1::dns(53)

Date/Time :2007-02-19 11:22:40
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.37, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.37:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:40
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:35
Severity :Medium
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:194.102.62.1: :dns(53))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: UDP Out
Destination: 194.102.62.1::dns(53)

Date/Time :2007-02-19 11:22:34
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:30
Severity :Medium
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:194.102.62.1: :dns(53))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: UDP Out
Destination: 194.102.62.1::dns(53)

Date/Time :2007-02-19 11:22:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.2.5, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.2.5:nbdgram(138)
Destination: 10.8.2.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.28, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 194.102.62.28:nbdgram(138)
Destination: 194.102.62.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.25, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.25:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.162:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.8, Port = 631)
Protocol: UDP Incoming
Source: 194.102.62.8:631
Destination: 194.102.62.255:631
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:19
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.8, Port = 631)
Protocol: UDP Incoming
Source: 194.102.62.8:631
Destination: 194.102.62.255:631
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:13
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.60.21, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.60.21:nbdgram(138)
Destination: 10.8.60.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:13
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.5.253, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.5.253:nbdgram(138)
Destination: 10.8.5.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:13
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.37, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.37:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.101, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.101:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:22:02
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.36, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.36:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.38, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.38:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.34, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.34:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.35, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.35:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.31, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.31:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.33, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.33:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.8, Port = 631)
Protocol: UDP Incoming
Source: 194.102.62.8:631
Destination: 194.102.62.255:631
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:51
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.30, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.30:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:46
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.32, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.32:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:46
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.28, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.28:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:46
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:41
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.103, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.103:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:41
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.24, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.24:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:41
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.29, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.29:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:40
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:35
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.27, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.27:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:35
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.22, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.22:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:35
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.26, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.26:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:30
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.23, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.23:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.158, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.158:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:29
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, Protocol = IGMP)
Protocol:IGMP Incoming
Source: 194.102.62.12
Destination: 239.255.255.250
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.118, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.118:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, Protocol = IGMP)
Protocol:IGMP Incoming
Source: 194.102.62.12
Destination: 239.255.255.250
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:24
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, Protocol = IGMP)
Protocol:IGMP Incoming
Source: 193.226.14.59
Destination: 224.0.0.1
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:19
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.158, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.158:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:19
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.8, Port = 631)
Protocol: UDP Incoming
Source: 194.102.62.8:631
Destination: 194.102.62.255:631
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:19
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.162:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:19
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, Protocol = IGMP)
Protocol:IGMP Incoming
Source: 194.102.62.12
Destination: 239.255.255.250
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:14
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.162:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:14
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.197, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.197:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:14
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.177:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:14
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.162:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.177:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.247, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.247:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.8.50.20, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.8.50.20:nbdgram(138)
Destination: 10.8.50.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.162:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.177:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:08
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.177:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.162:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.177:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:21:03
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.162:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:58
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.82, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 194.102.62.82:nbdgram(138)
Destination: 194.102.62.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.162, Port = nbname(137))
Protocol: UDP Incoming
Source: 10.10.10.162:nbname(137)
Destination: 10.10.10.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 10.10.10.177, Port = nbdgram(138))
Protocol: UDP Incoming
Source: 10.10.10.177:nbdgram(138)
Destination: 10.10.10.255:nbdgram(138)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.30, Port = who(513))
Protocol: UDP Incoming
Source: 194.102.62.30:who(513)
Destination: 194.102.62.255:who(513)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:57
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

Date/Time :2007-02-19 11:20:52
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 194.102.62.7, Port = nbname(137))
Protocol: UDP Incoming
Source: 194.102.62.7:nbname(137)
Destination: 194.102.62.255:nbname(137)
Reason: Network Control Rule ID = 5

mike6688 · February 19, 2007, 1:47pm

Hi,

There are a few entries which show svchost.exe as denied. Can you go through your application monitor and change svchost.exe entries to allow, as blocking these can cause problems with certain programs accessing the internet.

Mike

alin2 · February 19, 2007, 10:35pm

Thank you very much for your kindness. Should I let svchost.exe full access or only partial ? It is safe enough to give it full access ? If not please give me some more details on the configuration. Maybe this is also connected with Windows update which also cannot be performed with my CFP enabled.

system · February 19, 2007, 11:42pm

You’re right, alin2. Svchost.exe needs outbound access for Windows Updates to work. I have the default ‘Do not show alerts for apps certified’ on (Security > Advanced > Miscellaneous > Config), which doesn’t even need to alert whenever I run Windows Update.

I can’t comment on advanced rules for svchost.exe since I don’t know much about it.

Osage · February 20, 2007, 2:35am

I have seen posts on other forums blaming the AOL active virus shield update problems on some AOL servers that are pretty flakey at present–I think if you check–you will see the successful updates finally occur at the Kaspersky site which is about choice four.—give AOL some time to get it together and the problem may go away.

mike6688 · February 20, 2007, 7:41pm

Hi,

svchost.exe is a Windows process used for things such as automatic updates, and is recommended to be given full access. It is safe to do so.
Svchost.exe is also used to ''handle processes executed from DLL’s" (CFP Description).

Mike

alin2 · February 20, 2007, 11:26pm

Thank you all for the information. I had two entries of svchost.exe in the Application Monitor and both were blocked. I enabled them and everything works fine now. Thanks again.

system · February 21, 2007, 1:03am

Great!

mike6688 · February 21, 2007, 8:20pm

Excellent to hear.

Mike