Author Topic: How to allow these traffic?  (Read 4100 times)

0 Members and 1 Guest are viewing this topic.

kaidai

  • Guest
How to allow these traffic?
« on: March 30, 2014, 06:58:15 PM »
123456

kaidai

  • Guest
Re: How to allow these traffic?
« Reply #1 on: March 31, 2014, 01:11:11 PM »
Is this question too diffcult  for the experts of avast members?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to allow these traffic?
« Reply #2 on: March 31, 2014, 01:26:52 PM »
You just show part of a log file.
What traffic are you talking about?
svchost is just a generic host controller.
It depends on what is using svchost if you should allow or block it.

So what is your question/problem ?

kaidai

  • Guest
Re: How to allow these traffic?
« Reply #3 on: March 31, 2014, 03:39:20 PM »
I don't know what svchost is,but I am facing this.
http://forum.avast.com/index.php?topic=147864.0
I guess it could be fixed if I can find a way to allow the blocked svchost inbound traffic.

"Allow connection to all network" will surely unblock the traffic, but I don't want this to happen.

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Re: How to allow these traffic?
« Reply #4 on: March 31, 2014, 03:56:12 PM »
This might help explain why you are having issues with port 3702 and the UDP connections
http://www.adminsub.net/tcp-udp-port-finder/3702
This concerns port 5355 http://www.speedguide.net/port.php?port=5355

But that still doesn't answer what programs are using those ports?
Once we know what's what then we can give you more and better direction.
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: How to allow these traffic?
« Reply #5 on: March 31, 2014, 04:57:33 PM »
It seems he is using Windows 7 so both links do not apply to him.
First thing to do is finding out what is using svchost.
The sysinternal tools can do so.

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Re: How to allow these traffic?
« Reply #6 on: March 31, 2014, 05:03:23 PM »
These ports are used in Vista and Win7. We need the OP to provide more info.  OS?
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

kaidai

  • Guest
Re: How to allow these traffic?
« Reply #7 on: March 31, 2014, 08:06:47 PM »
Windows 7 SP1 64bit
Avast Internet Security 2014.9.0.2016
Windows Firewall on
Windows Defender off
no Microsoft Essential Security or other security software

The default rule for svchost from avast is too scary,
So I tried copying the active rules of svchost and system to Avast firewall, although I don't understand why they are written as so.

Please help.
 

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Re: How to allow these traffic?
« Reply #8 on: March 31, 2014, 08:16:34 PM »
What happens if you turn the Windows Firewall off?  ???
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

kaidai

  • Guest
Re: How to allow these traffic?
« Reply #9 on: April 01, 2014, 09:35:07 AM »
Turning off Windows Firewall has no change.

One more thing
Why is the remote address empty?
What does an address of 0.0.0.0 mean?

AdrianH

  • Guest
Re: How to allow these traffic?
« Reply #10 on: April 01, 2014, 10:23:28 AM »
Quote
What does an address of 0.0.0.0 mean?

Place that query in Google .

0.0.0.0 is often used when there is no IP , or an invalid IP address, avast is probably blocking something you do not want touching your system. You do not want to allow something unknown and potentially dangerous .

Like Eddy said, get sysinternals running and find out what is using that address and those ports.