Archived from groups: comp.security.firewalls (
More info?)
"dak" <comp-security-firewalls@spamtrap.cjb.net> wrote in message news:ifokg0dgj2sj2tnrrftjlf034ihsvse87v@4ax.com...
> On Fri, 30 Jul 2004 11:40:16 GMT, "Ron O'Brien" <ron@castcall.co.uk> wrote:
>
> >I'm not a Firewall 'techie' so would like to know - in plain English - What
> >the 'Server Access' is all about in Zonealarm's program control.
>
> A "server" listens, waiting for something/someone to contact it. You give a
> program server rights/access and you open a hole up in your firewall to allow
> something/someone to contact it. The port it listens on is no longer
> closed/stealthed, it is wide open.
> Unless you have a specific reason for allowing others to access your computer
> (I'm not talking about them sitting at your keyboard) then you don't need to
> allow server rights/access for anything.
>
> >It doesn't seem to make any difference whether or not I give programs Server
> >access status or not.
>
> It can, and eventually will. Deny server rights/access for everything, unless
> a program specifically needs it and you are aware why it does.
>
> --
> dak
I agree wholeheartedly. In particular, Windows XP includes SvcHosts.exe and it asks for server rights automatically. Other programs use SvcHosts.exe to access the internet so not granting server rights is important.