Error number: 0x80072EFD and ZoneAlarm

I'm using the Freeware version of ZoneAlarm, and I was having the same problem.

After Reading Andy's 08/16/04 post in this group, I basically configured my
ZoneAlarm like he was configuring his Norton Firewall, with these exceptions.

In ZoneAlarm, Trusted Internet Hosts can't have "http://" in their name.
ZoneAlarm just can't resolve it. So I added v4.windowsupdate.microsoft.com,
v5.windowsupdate.microsoft.com and download.windowsupdate.com. ZoneAlarm can
resolve all of them. You need the v4.windowsupdate.microsoft.com for the "Auto
Update" feature. If you look in the registry with regedit, you will see that
"Auto Update" goes to v4.windowsupdate.microsoft.com.

On the Program Control Tab, I also had to "Allow Access" for
C:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32 Services) for
Trusted and Internet, but you can "Block Server" for Trusted and Internet.

Like andy said, don't forget to add these to your Trusted sites in Internet
Explorer. I have the following entries in my Trusted sites.
v4.windowsupdate.microsoft.com
v5.windowsupdate.microsoft.com
http://v4.windowsupdate.mictosoft.com
http://v5.windowsupdate.mictosoft.com
https://v4.windowsupdate.mictosoft.com
https://v5.windowsupdate.mictosoft.com
http://download.windowsupdate.com

I added the v4.windowsupdate.microsoft.com and v5.windowsupdate.microsoft.com
entries because I kept on getting popups about v5.windowsupdate.microsoft.com
not being in my Trusted Zone when I went to the Windows Update Website.

Well, I don't know how many other people with ZoneAlarm have been having this
problem, but this newsgroup was my only salvation.

Monty

It was the salvation for many of us


>-----Original Message-----
>I'm using the Freeware version of ZoneAlarm, and I was
having the same problem.
>
>After Reading Andy's 08/16/04 post in this group, I
basically configured my
>ZoneAlarm like he was configuring his Norton Firewall,
with these exceptions.
>
>In ZoneAlarm, Trusted Internet Hosts can't
have "http://" in their name.
>ZoneAlarm just can't resolve it. So I added
v4.windowsupdate.microsoft.com,
>v5.windowsupdate.microsoft.com and
download.windowsupdate.com. ZoneAlarm can
>resolve all of them. You need the
v4.windowsupdate.microsoft.com for the "Auto
>Update" feature. If you look in the registry with
regedit, you will see that
>"Auto Update" goes to v4.windowsupdate.microsoft.com.
>
>On the Program Control Tab, I also had to "Allow Access"
for
>C:\WINDOWS\System32\svchost.exe (Generic Host Process
for Win32 Services) for
>Trusted and Internet, but you can "Block Server" for
Trusted and Internet.
>
>Like andy said, don't forget to add these to your
Trusted sites in Internet
>Explorer. I have the following entries in my Trusted
sites.
>v4.windowsupdate.microsoft.com
>v5.windowsupdate.microsoft.com
>http://v4.windowsupdate.mictosoft.com
>http://v5.windowsupdate.mictosoft.com
>https://v4.windowsupdate.mictosoft.com
>https://v5.windowsupdate.mictosoft.com
>http://download.windowsupdate.com
>
>I added the v4.windowsupdate.microsoft.com and
v5.windowsupdate.microsoft.com
>entries because I kept on getting popups about
v5.windowsupdate.microsoft.com
>not being in my Trusted Zone when I went to the Windows
Update Website.
>
>Well, I don't know how many other people with ZoneAlarm
have been having this
>problem, but this newsgroup was my only salvation.
>
>Monty
>
>.
>

I'm just curious, how it works with Norton IS - tried analog entries, but had
no success; only when I turn off the firewall completely, the update process
seems to work.

"JTR" wrote:

> It was the salvation for many of us
>
>
> >-----Original Message-----
> >I'm using the Freeware version of ZoneAlarm, and I was
> having the same problem.
> >
> >After Reading Andy's 08/16/04 post in this group, I
> basically configured my
> >ZoneAlarm like he was configuring his Norton Firewall,
> with these exceptions.
> >
> >In ZoneAlarm, Trusted Internet Hosts can't
> have "http://" in their name.
> >ZoneAlarm just can't resolve it. So I added
> v4.windowsupdate.microsoft.com,
> >v5.windowsupdate.microsoft.com and
> download.windowsupdate.com. ZoneAlarm can
> >resolve all of them. You need the
> v4.windowsupdate.microsoft.com for the "Auto
> >Update" feature. If you look in the registry with
> regedit, you will see that
> >"Auto Update" goes to v4.windowsupdate.microsoft.com.
> >
> >On the Program Control Tab, I also had to "Allow Access"
> for
> >C:\WINDOWS\System32\svchost.exe (Generic Host Process
> for Win32 Services) for
> >Trusted and Internet, but you can "Block Server" for
> Trusted and Internet.
> >
> >Like andy said, don't forget to add these to your
> Trusted sites in Internet
> >Explorer. I have the following entries in my Trusted
> sites.
> >v4.windowsupdate.microsoft.com
> >v5.windowsupdate.microsoft.com
> >http://v4.windowsupdate.mictosoft.com
> >http://v5.windowsupdate.mictosoft.com
> >https://v4.windowsupdate.mictosoft.com
> >https://v5.windowsupdate.mictosoft.com
> >http://download.windowsupdate.com
> >
> >I added the v4.windowsupdate.microsoft.com and
> v5.windowsupdate.microsoft.com
> >entries because I kept on getting popups about
> v5.windowsupdate.microsoft.com
> >not being in my Trusted Zone when I went to the Windows
> Update Website.
> >
> >Well, I don't know how many other people with ZoneAlarm
> have been having this
> >problem, but this newsgroup was my only salvation.
> >
> >Monty
> >
> >.
> >
>

I did a little bit more checking, and found out that a lot of what I did was
OVERKILL.

For ZoneAlarm here's all you REALLY need to do.

On the Program Control Tab, "Allow Access" for C:\WINDOWS\System32\svchost.exe
(Generic Host Process for Win32 Services) for Trusted and Internet, but you
should probably "Block Server" for Trusted and Internet.

I added the v4.windowsupdate.microsoft.com and windowsupdate.microsoft.com
entries to my Trusted sites in Internet Explorer because I kept on getting
popups about v5.windowsupdate.microsoft.com not being in my Trusted Zone when I
went to the Windows Update Website.

And it still works. Well that's about it. My ZoneAlarm has a few less holes in
it and I can still get updates. I'll have to wait and see if I get offered any
AUTO UPDATES.

Later, Monty

Michael & Betty Montgomery wrote:
> I'm using the Freeware version of ZoneAlarm, and I was having the same
> problem.
>
> After Reading Andy's 08/16/04 post in this group, I basically configured
> my ZoneAlarm like he was configuring his Norton Firewall, with these
> exceptions.
>
> In ZoneAlarm, Trusted Internet Hosts can't have "http://" in their name.
> ZoneAlarm just can't resolve it. So I added
> v4.windowsupdate.microsoft.com, v5.windowsupdate.microsoft.com and
> download.windowsupdate.com. ZoneAlarm can resolve all of them. You need
> the v4.windowsupdate.microsoft.com for the "Auto Update" feature. If you
> look in the registry with regedit, you will see that "Auto Update" goes
> to v4.windowsupdate.microsoft.com.
>
> On the Program Control Tab, I also had to "Allow Access" for
> C:\WINDOWS\System32\svchost.exe (Generic Host Process for Win32
> Services) for Trusted and Internet, but you can "Block Server" for
> Trusted and Internet.
>
> Like andy said, don't forget to add these to your Trusted sites in
> Internet Explorer. I have the following entries in my Trusted sites.
> v4.windowsupdate.microsoft.com
> v5.windowsupdate.microsoft.com
> http://v4.windowsupdate.mictosoft.com
> http://v5.windowsupdate.mictosoft.com
> https://v4.windowsupdate.mictosoft.com
> https://v5.windowsupdate.mictosoft.com
> http://download.windowsupdate.com
>
> I added the v4.windowsupdate.microsoft.com and
> v5.windowsupdate.microsoft.com entries because I kept on getting popups
> about v5.windowsupdate.microsoft.com not being in my Trusted Zone when I
> went to the Windows Update Website.
>
> Well, I don't know how many other people with ZoneAlarm have been having
> this problem, but this newsgroup was my only salvation.
>
> Monty
>