WinXP re. services.msc

[Sag2734]

It seems that both REMOTE ACCESS CONNECTION MANAGER and REMOTE ACCESS AUTO CONNECTION MANAGER need to be enabled to maintain your firewall in WinXP, but sometimes even though set on automatic and started they disable themselves. Almost always after a registry or program change and reboot. BUT SOMETIMES FOR NO APPARENT REASON AT ALL.

Does anyone know why and have a solution?:confused:

[drdoug99]

just use a different firewall? I never noticed those programs needing to be enabled before.

[onetrueday]

I would disable the firewall through network properties, not through services.exe. After ten installs, the one thing I've learned is not to touch services.exe except for remote registry and netbios.

[Sag2734]

I do not want to use a different firewall nor disable this one. In fact I have deleted ZoneAlarm PRO which I paid good money for in preference to the firewall that is a part of WinXP. It has proven to be very efficient and resource sparing than any I have tried (ie. Sysgate, Tiny, etc.). It is only this one idiosyncrasy that I have a problem with.... Anyone else have a clue??

p.s. services.msc is a very handy tool depending on what you want to do with your PC...you just have to pay close attention to the dependencies both for and aft!!!

[onetrueday]

Have you run a port scan using just the XP firewall? It only protects a couple of ports and most kiddies arent even going to look to those ports to begin with! And in reference to firewall bing a resource hog, how slow of a machine do you have that the 6megs that tiny uses is considered a problem? I dont mean to sound harsh, merely concerened.

The reason I've become a little paranoid about touching services.exe is simple. Even though something that looks like it has no meaning now, might be used by something later. After I've disabled things that I am sure wont be needed, NAV2002 and tiny both have serious problems. Plus, compare how many resources you really have free! After a good cleaning of services.exe, I end up with about 7 more megs of memory. If you included the applications that dont run anymore as a result, you might save up to 20megs. Considering ram is so cheap and many people have 256 and beyond, I would favor leaving it be. For example, the 'application layer gateway' is something that does seem to have a use. Yet, hotline depends on it.

[Sag2734]

Good Info!
But I have run the scan on Steve Gibson's site and DSL's quick and full scan and come up fully filtered "0".

[onetrueday]

Shields up is a great tool when you first set up your computer, but all it tests is the major ports. If you remember when you were using ZA pro, most of the ports that were scanned were strange ports. Ports that didnt seem obvious. I would try some of the scans from here:

Port Scanner (http://scan.sygatetech.com/)

I forgot which one it is on the right hand side, but one of them will try EVERY single port. It goes 1-10, then 2-20 etc. This will show you exactly how secure you really are against the 'bad people'. I wouldnt let it run all the way up, but at least to the net bios port.

[Sag2734]

Thanks for the test site, but as you can see the WinXP Firewall blocks EVERY PROBE!!!
Now my original question was (see above)

You have blocked all of our probes! We still recommend running this test both with
and without Secure Desktop enabled... so turn it off and try the test again.
Why not download and install our Award-Winning* Personal Firewall now?
closed, but they are completely hidden (stealthed) to attackers.

Service Ports Status Additional Information
FTP DATA 20 BLOCKED Used by FTP for data transmission in Passive mode.
FTP 21 BLOCKED File Transfer Protocol is used to transfer files between computers. A misconfigured FTP server can allow an attacker to transfer files, trojan horses, and virus programs at will.
SSH 22 BLOCKED Secure Shell, a encrypted type of telnet. If misconfigured it can allow for brute-force attacks on your administration account.
TELNET 23 BLOCKED Telnet is used to remotely create a shell (dos prompt), this can allow an attacker to control your system as if he was sitting in front of it.
SMTP 25 BLOCKED SMTP is used to send email acrost the internet. This allows an attacker to verify user accounts on your system, send anonymous (spam) email, or even access files on your hard drive.
DNS 53 BLOCKED Domain Name Services are used to resolve host names to IP addresses.
DDC 59 BLOCKED Used mainly by file transfer and chat programs.
FINGER 79 BLOCKED Finger offers information about who is currently logged in to your computer.
WEB 80 BLOCKED HTTP web services publish web pages. A misconfigured web server can not only offer an attacker needed information about his target, but it can allow for various security breaches.
POP3 110 BLOCKED Post Office Protocol is used to receive email. It can be used by attackers to create fake email addresses, execute programs, and even intercept your private email.
IDENT 113 BLOCKED Ident is often used for IRC (chat), but also provides information about your system and who is using it.
NetBIOS 139 BLOCKED NetBios is used to share files through your Network Neighborhood. If you are connected to the internet with this open, you could be sharing your whole hard drive with the world! This is a very dangerous port to have open.
HTTPS 443 BLOCKED Secure Web Servers are often used by banks and online vendors.
Server Message Block 445 BLOCKED In Windows 2000, Microsoft added the possibility to run SMB directly over TCP/IP, without the extra layer of NBT.
SOCKS PROXY 1080 BLOCKED Socks Proxy is an internet proxy service, many IRC servers will not allow you to log in if you are running an unsecured socks proxy.
SOURCE PORT 4193 BLOCKED This is the port you are using to communicate to our Web Server. A firewall that uses Stateful Packet Inspection will show a 'BLOCKED' result for this port.
WEB PROXY 8080 BLOCKED HTTP Web Proxy allows other people to bounce their web browser off of your computer to fake their real IP address to web servers.

You have blocked all of our probes! We still recommend running this test both with
and without Secure Desktop enabled... so turn it off and try the test again.
Why not download and install our Award-Winning* Personal Firewall now?
Scanning ports 1 to 10 . . .
Scanning ports 11 to 20 . . .
Scanning ports 21 to 30 . . .
Scanning ports 31 to 40 . . .
Scanning ports 41 to 50 . . .
Scanning ports 51 to 60 . . .
Scanning ports 61 to 70 . . .
Scanning ports 71 to 80 . . .
Scanning ports 81 to 90 . . .
Scanning ports 91 to 100 . . .
Scanning ports 101 to 110 . . .
Scanning ports 111 to 120 . . .
Scanning ports 121 to 130 . . .
Scanning ports 131 to 140 . . .
Scanning ports 141 to 150 . . .
Scanning ports 151 to 160 . . .
Scanning ports 161 to 170 . . .
Scanning ports 171 to 180 . . .
Scanning ports 181 to 190 . . .
Scanning ports 191 to 200 . . .
Scanning ports 201 to 210 . . .
Scanning ports 211 to 220 . . .
Scanning ports 221 to 230 . . .
Scanning ports 231 to 240 . . .
Scanning ports 241 to 250 . . .
Scanning ports 251 to 260 . . .
Scanning ports 261 to 270 . . .
Scanning ports 271 to 280 . . .
Scanning ports 281 to 290 . . .
Scanning ports 291 to 300 . . .
Scanning ports 301 to 310 . . .
Scanning ports 311 to 320 . . .
Scanning ports 321 to 330 . . .
Scanning ports 331 to 340 . . .
Scanning ports 341 to 350 . . .
Scanning ports 351 to 360 . . .
Scanning ports 361 to 370 . . .
Scanning ports 371 to 380 . . .
Scanning ports 381 to 390 . . .
Scanning ports 391 to 400 . . .
Scanning ports 401 to 410 . . .
Scanning ports 411 to 420 . . .
Scanning ports 421 to 430 . . .
Scanning ports 431 to 440 . . .
Scanning ports 441 to 450 . . .
Scanning ports 451 to 460 . . .
Scanning ports 461 to 470 . . .
Scanning ports 471 to 480 . . .
Scanning ports 481 to 490 . . .
Scanning ports 491 to 500 . . .
Scanning ports 501 to 510 . . .
Scanning ports 511 to 520 . . .
Scanning ports 521 to 530 . . .
Scanning ports 531 to 540 . . .
Scanning ports 541 to 550 . . .
Scanning ports 551 to 560 . . .
Scanning ports 561 to 570 . . .
Scanning ports 571 to 580 . . .
Scanning ports 581 to 590 . . .
Scanning ports 591 to 600 . . .
Scanning ports 601 to 610 . . .
Scanning ports 611 to 620 . . .
Scanning ports 621 to 630 . . .
Scanning ports 631 to 640 . . .
Scanning ports 641 to 650 . . .
Scanning ports 651 to 660 . . .
Scanning ports 661 to 670 . . .
Scanning ports 671 to 680 . . .
Scanning ports 681 to 690 . . .
Scanning ports 691 to 700 . . .
Scanning ports 701 to 710 . . .
Scanning ports 711 to 720 . . .
Scanning ports 721 to 730 . . .
Scanning ports 731 to 740 . . .
Scanning ports 741 to 750 . . .
Scanning ports 751 to 760 . . .
Scanning ports 761 to 770 . . .
Scanning ports 771 to 780 . . .
Scanning ports 781 to 790 . . .
Scanning ports 791 to 800 . . .
Scanning ports 801 to 810 . . .
Scanning ports 811 to 820 . . .
Scanning ports 821 to 830 . . .
Scanning ports 831 to 840 . . .
Scanning ports 841 to 850 . . .
Scanning ports 851 to 860 . . .
Scanning ports 861 to 870 . . .
Scanning ports 871 to 880 . . .
Scanning ports 881 to 890 . . .
Scanning ports 891 to 900 . . .
Scanning ports 901 to 910 . . .
Scanning ports 911 to 920 . . .
Scanning ports 921 to 930 . . .
Scanning ports 931 to 940 . . .
Scanning ports 941 to 950 . . .
Scanning ports 951 to 960 . . .
Scanning ports 961 to 970 . . .
Scanning ports 971 to 980 . . .
Scanning ports 981 to 990 . . .
Scanning ports 991 to 1000 . . .
Scanning ports 1001 to 1010 . . .
Scanning ports 1011 to 1020 . . .
Scanning ports 1021 to 1024 . . .

You have blocked all of our probes! We still recommend running this test both with
and without Secure Desktop enabled... so turn it off and try the test again.
Why not download and install our Award-Winning* Personal Firewall now?