Author Topic: Vista firewall + Avast updates  (Read 18892 times)

0 Members and 1 Guest are viewing this topic.

Offline D1ssident

  • Newbie
  • *
  • Posts: 3
Vista firewall + Avast updates
« on: February 12, 2007, 02:54:35 PM »
With the latest version of Avast, if I block the inbound and outbound connections with the Vista embeded firewall (advanced mode) and allow all the Avast services/files to pass through (in+out), strangely, Avast will not be able to make updates with downloadxx.avast.com. If I remember well, the logs said to check the ie settings (wich were untouched). I'm using the retail version of Vista so is there something I can do
to make the updates work correctly? Is this a bug or something?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83766
  • No support PMs thanks
Re: Vista firewall + Avast updates
« Reply #1 on: February 12, 2007, 03:24:04 PM »
there is no service for avast.setup which requires internet access to be able to be able to update. Ensure it isn't blocked by the Vista firewall.

The avast.setup isn't a permanent file but one that is created at the time of update and once the update is complete it is deleted. It would be in this folder when created, C:\Program Files\Alwil Software\Avast4\Setup\avast.setup, assuming you installed avast in the default location, you could try adding that path.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.7.2425 (build 20.7.5568.595) UI-1.0.558/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline D1ssident

  • Newbie
  • *
  • Posts: 3
Re: Vista firewall + Avast updates
« Reply #2 on: February 12, 2007, 05:24:07 PM »
Windows Vista firewall (advanced security mode) can't allow rules with .setup file extention (so I can't add the path) but only .exe so I uninstalled Avast, reinstalled (with default firewall settings- blocking inbound packets) and the updates were ok but once I block incoming and outgoing connections and allow all the Avast .exe files/services via rules (in+out), I get the message: "Last encountered error: Cannot connect to downloadxx.avast.com (xxx.xxx.xxx.xxx:80)". Everything is fine except the updates.
« Last Edit: February 12, 2007, 06:11:24 PM by D1ssident »

Offline .: Mac :.

  • Avast Überevangelist
  • Ultra Poster
  • *****
  • Posts: 5086
Re: Vista firewall + Avast updates
« Reply #3 on: February 12, 2007, 05:39:07 PM »
Disable the outbound protection of the vista firewall. If you really want outbound protection invest in a good third party firewall. Most are more configurable than the built in one and some have free versions
"People who are really serious about software should make their own hardware." - Alan Kay

Offline D1ssident

  • Newbie
  • *
  • Posts: 3
Re: Vista firewall + Avast updates
« Reply #4 on: February 12, 2007, 06:07:36 PM »
Vista firewall isn't that bad so I hope that in a near futur, Avast programmers will make it usable for users/admins who want to stick with Vista firewall and block in+out connections.

Someone have a good non-beta third party firewall to suggest?

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 83766
  • No support PMs thanks
Re: Vista firewall + Avast updates
« Reply #5 on: February 12, 2007, 06:16:14 PM »
Mac is right to say you should seriously consider a third party firewall, the Vista firewall was never going to give the kind of flexibility, configurability or protection of a full blown software firewall. If it did the firewall manufactures would be screaming blue murder and instructing their legal eagles to issue anti-trust/competitive suits about monopoly position, etc.

For me a firewall that 'isn't that bad' 'isn't going to be good enough' certainly not for me, vista or otherwise. I mean it should be a basic option that Vista's outbound protection at the very least ask permission for a process to connect. If you make an error in your decision you should at least be able to correct it and either allow connection or delete the entry for the blocked process, which would force it to ask again.

avast isn't doing that much different to other update processes and a firewall should be flexible enough to cater for multiple configurations for individual files accessing the internet.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.7.2425 (build 20.7.5568.595) UI-1.0.558/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline fabrice518

  • Newbie
  • *
  • Posts: 4
Re: Vista firewall + Avast updates
« Reply #6 on: March 17, 2007, 09:21:04 AM »
Hi,

I don't have find your avast.setup on XP and vista !
But you can allow avast update with :

VisthUpd.exe

see U

PS: see my topic :
http://forum.avast.com/index.php?topic=27102.0

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Vista firewall + Avast updates
« Reply #7 on: March 17, 2007, 12:54:59 PM »
I don't have find your avast.setup on XP and vista !
avast.setup is a temporary file created by setup.ovr file on the <avast>\setup folder.
It's used to update avast.
The best things in life are free.

Offline reachnet

  • Newbie
  • *
  • Posts: 6
Re: Vista firewall + Avast updates
« Reply #8 on: March 25, 2007, 04:35:40 PM »
For those interested and running Vista FW with OB access blocked, just to confirm - these Avast settings work correctly. After getting these to work you can "tighten" the actual ports used.
BTW - you can add avast.setup as an exception - just specify *.* in the files dialog box when looking for it.

Rule1: IE OutBound - general IE access.
Rule2: Avast Web Shield - ashWebSv.exe
Rule3: Avast Mail Scanner - ashMailSv.exe - haven't actually tried this yet.
Rule4: Avast.Setup

After adding the rules - reboot - keeps things simple.

Seems to me Avast will need to be "re-engineered" at some point - the idea of allowing access to a "temp" file is a tad questionnable - although it works.

BTW - you can also get Windows Updates working by adding an exception for svchost - again - you may need to "tighten" the ports afterwards - the firewall runs under svchost. There may be security implications by doing this - haven't had the time to look into that yet.

Cheers, r

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Vista firewall + Avast updates
« Reply #9 on: March 25, 2007, 04:39:38 PM »
Seems to me Avast will need to be "re-engineered" at some point - the idea of allowing access to a "temp" file is a tad questionnable - although it works.
I think they won't change this... the temporary file has its own meanings... although they never published them (maybe for commercial/security reasons).
The best things in life are free.

Offline al968

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 847
Re: Vista firewall + Avast updates
« Reply #10 on: March 25, 2007, 04:42:00 PM »
If you are looking for alternative Comodo Firewall is a firewall that many people seem happy with, the only bad news is that right now its not compatible with Vista but if you wait about 21 weeks it will be ready.

Please note that Comdo firewall is freee and is the only known antivirus to have passed all known leaktests.

Al968

Offline reachnet

  • Newbie
  • *
  • Posts: 6
Re: Vista firewall + Avast updates
« Reply #11 on: March 25, 2007, 04:54:24 PM »
I think they won't change this... the temporary file has its own meanings... although they never published them (maybe for commercial/security reasons).

Possibly - if they don't change it they definetly need to officially document it
Correction on my previous post "the firewall runs under svchost" should obviously have been "Windows Update runs under svchost".

I've read the various "slaggings" about MSs two-way FW in Vista and I only actually have one real complaint with it -which is more geared around the fact they probably just didn't have time to implement it within the Vista release timeframe.
The FW (as in XP/SP2) prompts when InBound access is required by Apps/Progs and gives you some idea as to
what that App is.
For OB access - it doesn't give you a darned thing - only the blocks in the FW logs give you any indication where to start.
Users will have no choice but to consult documentation for the Apps in question - which is exactly what MS want - i.e. that's nothing to do with us.
I can imagine some Corps having monumental issues with this and there will be *ALOT* of work required to keep existing Infrastructures up and running.
That said, the FW does what it is documented to do - it just needs more development to be up to competing with third party firewalls etc... which is more than a few years away yet.

r

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Vista firewall + Avast updates
« Reply #12 on: March 25, 2007, 05:09:47 PM »
Possibly - if they don't change it they definetly need to officially document it
What do you mean? This is a well-known update behavior, there is nothing 'hidden' here.
The best things in life are free.

Offline reachnet

  • Newbie
  • *
  • Posts: 6
Re: Vista firewall + Avast updates
« Reply #13 on: March 25, 2007, 05:14:58 PM »
Possibly - if they don't change it they definetly need to officially document it
What do you mean? This is a well-known update behavior, there is nothing 'hidden' here.

You are of course correct.
http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=25
My bad..

r


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re: Vista firewall + Avast updates
« Reply #14 on: March 25, 2007, 05:29:07 PM »
My bad..
No need to be sorry. By the way, thanks for posting that link.
Maybe it will be useful to this user: http://forum.avast.com/index.php?topic=27338.msg222781#msg222781
The best things in life are free.