Why does Vista's firewall outbound protection block Windows Update?

  • Thread starter Thread starter *^&%$$#*%!
  • Start date Start date
&

*^&%$$#*%!

One would think that Microsoft would have put a hook in the firewall to
allow Windows Update to function, but nope. If you use outbound protection
it doesn't work until I allow wuapp.exe and svchost.exe to pass through and
then Windows throws a fit because you created a rule that may conflict with
svchost.exe built in internal rules. For now I enable the rule to allow
svchost to pass through when I want to check for updates and then disable
the rule the rest of the time. Is there an easier way around this so I don't
have to do that everytime I want to check for updates?
 
housetrained said:
Yep! There's a Vista version (used it for 3/4 months now) works fine here.
Click to expand...

Interesting. However, that still doesn't help the OP with his vista
firewall question. Your vista firewall is turned off.

Ari

--
spammage trappage: remove the underscores to reply
Many people around the world are waiting for a marrow transplant. Please
volunteer to be a marrow donor and literally save someone's life:
http://www.abmdr.org.au/
http://www.marrow.org/
 
In message <hq%ij.10394$wx.8552@pd7urf1no> "*^&%$$#*%!"
One would think that Microsoft would have put a hook in the firewall to
allow Windows Update to function, but nope. If you use outbound protection
it doesn't work until I allow wuapp.exe and svchost.exe to pass through and
then Windows throws a fit because you created a rule that may conflict with
svchost.exe built in internal rules. For now I enable the rule to allow
svchost to pass through when I want to check for updates and then disable
the rule the rest of the time. Is there an easier way around this so I don't
have to do that everytime I want to check for updates?
Click to expand...

I'm not familiar with Vista's packet filtering, but I'd consider this a
good thing.

Any hole that exists by default can and will eventually be used by
malicious software.

However, rather then stressing about it, you're probably better off not
installing crapware that tries to connect without your permission
anyway.
 
Back
Top