On the Zone Alarm Control Center, Alerts and Logs, Log Viewer tab, I have a full page of notices that svchost.exe using IP source 192.168.1.47:xxxx where xxxx is 1032, 1117, 1254, etc. tried to access 192.168.1.1 port 53 (The DNS server, according to ipconfig/all, is the router, 192.168.1.1)
Operating system = Windows XP Professional, SP2, all updates installed,
net access via Verizon DSL, modem/router Westel 327.
Norton Corporate AV, System Mechanic 7 Professional for system maintenance, and free Zone Alarm firewall.
I get lots and lots of notices like this.
ZoneAlarm blocked Generic Windows services from access to port 53 on a DNS server.
I clicked "more information" and gleaned this from that page:
Source IP Address: 192.168.1.xxx (The DSL router)
Source Port: 1254, also Source Port: 1331 and others
Destination IP: 192.168.1.1
Destination Port: 53
Program Name: Generic Host Process for Win32 Services
File Name: svchost.exe
I would like to stop these notices, either by granting access, or once I know why access is a bad idea, then turn the notices off.
Operating System:Windows XP Pro
Product Name:ZoneAlarm (Free)