CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

Can CCSP c-Wall winners post here?
Goto page Previous  1, 2
 
Post new topic   Reply to topic       All -> FavForums -> x-Wall series [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
x-Wall-team

Corporal
Corporal


Joined: Apr 19, 2004
Posts: 50
Location: USA

PostPosted: Sat Oct 30, 2004 2:17 pm    Post subject:
Reply with quote

About the messenger and the updater.

The expected reason of the new behavior is as follows.
x-Wall is able to set separate access permission for each application separately.
x-Wall identifies application by internal (kernel) process name. In mot cases it is equal to exe filename shorted to first 16 letters of the name)
The most probable reason of setting permission for the both applications simultaneously is equality of their process names.
The process names investigation and comparison are the reason why I have asked you to export register branches for me.

About Windows Update.
Usually the most important motivation of personal firewall usage is stopping of unknown or unwanted internet activity. The activity could be produced by various automatic updates too.
The common way of problem detection/repairing is
- find something that doesn’t work
- See logs (via file or Log tab)
- find “red arrows” – blocked connection attempts.
- enable more access for the applications designated with “red arrows” and repeat the attempt.

If you want to enable entire access for the application, set its zone to “enable all”
You have an opportunity to make the firewall very transparent (allow all the connections requests). For that purpose set “Zone Override” combo to “Enable All”

Back to top
View users profile Send private message Visit posters website
seafsee

General
General
Premium Member

Joined: Apr 02, 2004
Posts: 4920

Premium

PostPosted: Wed Nov 03, 2004 3:38 am    Post subject:
Reply with quote

I think I understand what you previously asked of me, however there's a problem with your request as outlined by my abilities of what I am able to do in this forum.

Quote:
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum
You can report post to moderators in this forum
You cannot attach files in this forum
You can download files in this forum
You will need to let me know where you'd like these 2 files. 2? Yes! Turns out I had 3 entries for Control Set. I have no idea if this is normal. W-Wall was in the 2nd and 3rd set.

I spent another hour searching for Windows Update in the log, and when at last I found a new entry from today after a new try, it appeared that everything was fine.

I am no dummy when it comes to computers. Neither am I an expert. It seems to me this product could benefit from more user friendliness. Whatever blocked Windows Update must have been (must be) built in with default settings, as I never got a pop-up asking for permission for anything. To access Windows Update today, I needed to "Disable All" in Content Rules.


_________________
image
Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
x-Wall-team

Corporal
Corporal


Joined: Apr 19, 2004
Posts: 50
Location: USA

PostPosted: Wed Nov 03, 2004 8:54 am    Post subject:
Reply with quote

>I think I understand what you previously asked of me, however there's a problem with your request as outlined by my abilities of what I am able to do in this forum.
You could send it to me via web contact form at the site. Don’t hesitate doing it.
Files are not so big, just notice – “from seasfee to Serge” in the form’s subject (and/or specify your real e-mail for such data exchange).

>You will need to let me know where you'd like these 2 files. 2? Yes! Turns out I had 3 entries for Control Set. I have no idea if this is normal. W-Wall was in the 2nd and 3rd set.
I need only one file. It is simple.
The registry branch’s place, I have asked you to send, depends on OS type you use. I think you don’t use several OSes simultaneously Smile
If you use Win2000 or XP your branch is here
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SOFTWARE\sphinx-soft\x-Wall\Driver\3.0\Process

if win98 or winME here
HKEY_LOCAL_MACHINE\SOFTWARE\sphinx-soft \x-Wall\Driver\3.0\Process

HOW TO?
Run regedit, find the branch depending of OS type you use. To find desired register branch expand them in series using the path above. Press right mouse button on chosen branch, choose export, choose “reg” format and file name.

>I am no dummy when it comes to computers. Neither am I an expert. It seems to me this product could benefit from more user friendliness.

I am glad to help you anyway. Sorry for my previous insufficient explanations. I will try to explain you everything you need.

>Whatever blocked Windows Update must have been (must be) built in with default settings, as I never got a pop-up asking for permission for anything.

I should notice a feature…. It concerns with current problem. Task (application) name, programs exe-file name and process name might be different. Is better to understand it.
You may have application (task) name “Very good program”. The main exe-file could be named “very_g_p.exe”. Running very_g_p.exe you usually have process very_g_p running. But the main process could launch another process and use it for internet access (ex “very_g_p_helper”)
x-Wall sets access permission basing on real process name causing internet access.
In the situation with Windows Update (application name) real updating could be performed on behalf of other process (or even windows kernel itself).
How to determine it? If you have a problem with an application’s internet access, try to reproduce the problem and switch to log tab immediately. If you find “red arrows” on the top of the log list, you will be able to determine the process (and possible application) name causing the problem. Then you should play with the permissions of found process/application

I am trying to focus the explanation on tiny theory, not on press-button instructions. I think the understanding is better.

Back to top
View users profile Send private message Visit posters website
seafsee

General
General
Premium Member

Joined: Apr 02, 2004
Posts: 4920

Premium

PostPosted: Sat Apr 23, 2005 10:04 pm    Post subject:
Reply with quote

The program stopped keeping a log file two days after it was installed.

I think something was broken. It always seemed to me I had to give the opposite directions if I needed something to work like Windows Update as outlined above.

I have uninstalled it. I still have the two files you requested. PM me where to send them.

Back to top
View users profile Send private message Visit posters website AIM Address Yahoo Messenger MSN Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> x-Wall series All times are GMT
Goto page Previous  1, 2
Page 2 of 2

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer