Why does Vista's firewall outbound protection block Windows Update?

One would think that Microsoft would have put a hook in the firewall to
allow Windows Update to function, but nope. If you use outbound protection
it doesn't work until I allow wuapp.exe and svchost.exe to pass through and
then Windows throws a fit because you created a rule that may conflict with
svchost.exe built in internal rules. For now I enable the rule to allow
svchost to pass through when I want to check for updates and then disable
the rule the rest of the time. Is there an easier way around this so I don't
have to do that everytime I want to check for updates?

Using Zonealarm free fw and don't have that problem.

--
John the West Ham fan
housetrained@hotmail.com
<><

"*^&%$$#*%!" <someone@somewhere.invalid> wrote in message
news:hq%ij.10394$wx.8552@pd7urf1no...
> One would think that Microsoft would have put a hook in the firewall to
> allow Windows Update to function, but nope. If you use outbound protection
> it doesn't work until I allow wuapp.exe and svchost.exe to pass through
> and then Windows throws a fit because you created a rule that may conflict
> with svchost.exe built in internal rules. For now I enable the rule to
> allow svchost to pass through when I want to check for updates and then
> disable the rule the rest of the time. Is there an easier way around this
> so I don't have to do that everytime I want to check for updates?

housetrained wrote:
> Using Zonealarm free fw and don't have that problem.
>

On Vista?

--
spammage trappage: remove the underscores to reply
Many people around the world are waiting for a marrow transplant. Please
volunteer to be a marrow donor and literally save someone's life:
http://www.abmdr.org.au/
http://www.marrow.org/

"spodosaurus" <spodosaurus@_yahoo_.com> wrote in message
news:fmj901$771$1@otis.netspace.net.au...
> housetrained wrote:
>> Using Zonealarm free fw and don't have that problem.
>>
>
> On Vista?
>
> --
> spammage trappage: remove the underscores to reply
> Many people around the world are waiting for a marrow transplant. Please
> volunteer to be a marrow donor and literally save someone's life:
> http://www.abmdr.org.au/
> http://www.marrow.org/

Yep! There's a Vista version (used it for 3/4 months now) works fine here.

--
John the West Ham fan
housetrained@hotmail.com
<><

housetrained wrote:
> "spodosaurus" <spodosaurus@_yahoo_.com> wrote in message
> news:fmj901$771$1@otis.netspace.net.au...
>> housetrained wrote:
>>> Using Zonealarm free fw and don't have that problem.
>>>
>>
>> On Vista?
>>
>
> Yep! There's a Vista version (used it for 3/4 months now) works fine here.
>

Interesting. However, that still doesn't help the OP with his vista
firewall question. Your vista firewall is turned off.

Ari

--
spammage trappage: remove the underscores to reply
Many people around the world are waiting for a marrow transplant. Please
volunteer to be a marrow donor and literally save someone's life:
http://www.abmdr.org.au/
http://www.marrow.org/

In message <hq%ij.10394$wx.8552@pd7urf1no> "*^&%$$#*%!"
<someone@somewhere.invalid> wrote:

>One would think that Microsoft would have put a hook in the firewall to
>allow Windows Update to function, but nope. If you use outbound protection
>it doesn't work until I allow wuapp.exe and svchost.exe to pass through and
>then Windows throws a fit because you created a rule that may conflict with
>svchost.exe built in internal rules. For now I enable the rule to allow
>svchost to pass through when I want to check for updates and then disable
>the rule the rest of the time. Is there an easier way around this so I don't
>have to do that everytime I want to check for updates?

I'm not familiar with Vista's packet filtering, but I'd consider this a
good thing.

Any hole that exists by default can and will eventually be used by
malicious software.

However, rather then stressing about it, you're probably better off not
installing crapware that tries to connect without your permission
anyway.