hi,
i want to know which apps/services are *allowed* to
make an internet connection on their own , without
my control. the purpose is to distinguish them from
malwares etc. in addition, how do *i control*, if
possible, which one is allowed and which is not?

win xp pro sp2
-----------
thx, jacob

Install a 3rd party firewall such as ZoneAlarm. Windows firewall does
not provide for outbound control.

jacob wrote:
> hi,
> i want to know which apps/services are *allowed* to
> make an internet connection on their own , without
> my control. the purpose is to distinguish them from
> malwares etc. in addition, how do *i control*, if
> possible, which one is allowed and which is not?
>
> win xp pro sp2
> -----------
> thx, jacob
>
>

"jacob" wrote

> hi,
> i want to know which apps/services are *allowed* to
> make an internet connection on their own , without
> my control. the purpose is to distinguish them from
> malwares etc. in addition, how do *i control*, if
> possible, which one is allowed and which is not?

The best way to prevent malware from making an outbound connection to the
internet is to not let the malware on your system in the first place.

http://www.cert.org/tech_tips/before...ug_in.html#III

http://www.claymania.com/safe-hex.html

Protect Your PC
http://www.microsoft.com/athome/security/protect/

http://wiki.ursine.ca/Top_posting

Bob I wrote:

> Install a 3rd party firewall such as ZoneAlarm. Windows firewall does
> not provide for outbound control.

Windows Firewall *does* provide that kind of control, it just doesn't pester
you about it for every program. Check out your Exceptions tab in the
Windows Firewall control panel.

That being said, per-process outbound access control is not necessary if you
don't use bad computing habits. See Message-Id:
<aavq54xva3.ln2@ursa-major.ursine.ca>.

jacob wrote:

> hi,
> i want to know which apps/services are *allowed* to
> make an internet connection on their own , without
> my control.

Check out your Windows Firewall settings.

> the purpose is to distinguish them from
> malwares etc. in addition, how do *i control*, if
> possible, which one is allowed and which is not?

Never, under any circumstances, run as administrator if you're not changing
system settings, adding/removing software, or doing system maintenance.
Never, under any circumstances, run software that you are anything less
than 100% certain is clean. The only time any of that personal firewall
snake oil makes any sense is if you aren't willing to take basic
precautions in the first place.

http://samspade.org/d/firewalls.html

Paul Johnson wrote:

>
> Bob I wrote:
>
>
>>Install a 3rd party firewall such as ZoneAlarm. Windows firewall does
>>not provide for outbound control.
>
>
> Windows Firewall *does* provide that kind of control, it just doesn't pester
> you about it for every program. Check out your Exceptions tab in the
> Windows Firewall control panel.
>

WRONG! Please read up.

http://www.microsoft.com/windowsxp/u...2_wfintro.mspx

Bob I wrote:

>
>
> Paul Johnson wrote:
>
>>
>> Bob I wrote:
>>
>>
>>>Install a 3rd party firewall such as ZoneAlarm. Windows firewall does
>>>not provide for outbound control.
>>
>>
>> Windows Firewall *does* provide that kind of control, it just doesn't
>> pester
>> you about it for every program. Check out your Exceptions tab in the
>> Windows Firewall control panel.
>>
>
> WRONG! Please read up.
>
>
http://www.microsoft.com/windowsxp/u...2_wfintro.mspx

That doesn't jive with the behavior I've seen. If I ever get around to it,
I'll write a HOWTO reproduce my results.