Jump to content

kyohong

Members
  • Posts

    1
  • Joined

  • Last visited

Posts posted by kyohong

  1. Hi, first my english not very well and i want to ask 2 questions

     

    Windows 7

    ESET Smart Security 10

     

    question 1:

    how can i input domain instead of IP to firewall zone ?

     

    i set the 3 major Win7 program allow access to internet

    svchost.exe/wuauserv (Windows Update) port: TCP 80, 443

    svchost.exe/NlaSvc (detect internet for switch Home / Public network function) port: TCP 80

    svchost.exe/CryptSvc (is about update the .cab files ...etc) port: TCP 80

     

    so i go to Firewall > Zone > created a zone called Microsoft Trusted Zone, and input all the IPs is collected by popup ask Allow or Deny windows

    104.116.243.17,
    134.170.165.248,
    134.170.165.249,
    134.170.51.190,
    173.223.85.3,
    184.28.37.50,
    184.84.60.29,
    191.232.80.58-191.232.80.60,
    191.234.72.186,
    203.186.47.187-203.186.47.240,
    203.80.97.8-203.80.97.27,
    207.46.154.200,
    207.46.155.185,
    216.58.197.110,
    216.58.199.110,
    23.2.16.208,
    23.218.34.222,
    61.244.242.24-61.244.242.32,
    65.55.138.112-65.55.138.114,
    65.55.163.222,
    65.55.252.71,
    96.7.54.104

     

    and then i go to Firewall > Firewall Rule > set the 3 major Win7 program allow access to zone: Microsoft Trusted Zone

    so now i just need to add or remove IP from Microsoft Trusted Zone, and no need change the 3 major program firewall rule anymore

    but actually all the IPs is ref to the domain as below

    deploy.akamaitechnologies.com

    ds.download.windowsupdate.com

    fe2.update.microsoft.com

    www.microsoft.com

    crl.microsoft.com

     

    so can i add the 5 domain to zone ?, instead of keeping mark down the IP from popup window and add to Microsoft Trusted Zone

     

     

    question 2:

    the popup window asking a program Allow or Deny to access internet, but i am typing a document and press a spacebar,

    and the popup window gone, so this action will make to default Allow or Deny ?

    if default is Allow access internet, i think this is the security problem

     

    so can i change the popup window default select Deny ?

    or the popup window ignore all the keyboard input ?

     

    sorry my english not very good, Thankyou

×
×
  • Create New...