Ask Leo! by Leo A. Notenboom

What are these 127.0.0.1 entries in my system hosts file?

Search First! Then browse: Categories | Full Archive | By Date | Newsletter

Home » Windows » Windows Configuration

Comments

Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.

Comment Page:  1  |  2 

What are these 0.0.0.0 entries in my system hosts file?

I believe that it's an incorrect attempt to do the same thing as 127.0.0.1 - block certain web sites.

-Leo

Posted by: dheikoop at September 5, 2008 7:28 AM

In addition to routing anti-malware sites to 127.0.0.1, I have seen malware actually direct it to their own sites.

Imagine what would happen if your hosts file pointed www.google.com to an IP address owned by a "bad guy", and instead of searching via Google, you were searching using a paid advertising site. Even if it did nothing else to your system, it would make money for the "bad guy".

Posted by: Ken B at September 5, 2008 8:48 AM

What a fantastic article! I've been trying to get my head-around the hosts file for a while, this explained it perfectly.

Now, the path to it! ....\etc\ Is that pronounced 'et cetera' or is it an acronym? Or neither?

Just wondered, because I occasionally direct someone to this location & wonder if I'm saying *ETC* (The letters), or 'Et Cetera'.

Just for reference!.....

Great article though, now I understand!

ETC is short for et cetera. It's actually goes back to the originally developed Unix systems many years ago. Certain folders were defined to hold certain things, but they needed a place to put random stuff or "everything else" ... hence "et cetera" or /etc/. It's used in various ways to similar effect to this day.

-Leo

Posted by: Just J at September 5, 2008 10:15 AM

The anti-spyware program I use puts blocked sites into the hosts list. I use spybot. If you are using that program then that is where that long list of sites came from.

Posted by: Steve Myers at September 6, 2008 1:46 PM

No Leo, it's not an incorrect attempt to do the same thing as 127.0.0.1 I think, because there are hundreds of 0.0.0.0-entries and they come from the RogueRemoverPro application.

Posted by: dheikoop at September 8, 2008 1:57 AM

When I first started using the hosts file and did dome reading about it, the advice for blocking sites was to use 0.0.0.0 which would do the same thing as 127.0.0.1
The problem was that on some XP machines (and I’ve never heard a satisfactory reason for why) it would cause the machine to respond slowly or crash. This happened to me and I used the alternative instead. Maybe the advent of the XP problem has led to 0.0.0.0 never being suggested anymore.

Posted by: Paul Higgins at September 9, 2008 9:31 AM

Ok now what if you dont have anything in that file is that good or bad. When I follow the path "\windows\system32\drivers\etc\hosts" hosts shows it as being a file and no files in it. Ok so some of us only know how to turn it on...

An empty or mostly empty hosts file is common, and in fact how Windows comes by default.

-Leo

Posted by: Jeff at September 9, 2008 3:09 PM

The routing tables use 0.0.0.0 to signify the default network connection in XP. I would think specifying this in your host file would just cause your computer to time out and get confused.

Definitely cause slow downs...

Posted by: Ziggie at September 10, 2008 8:34 AM

I've gone throuh this article and also the comments and found it very enlightening. Thanks - EFernandez

Posted by: Erasto Fernandez at September 12, 2008 10:36 PM

what if my hosts file does not contain a 127.0.0.1 number or a 0.000...etc number? i am trying to block a website on google chrome and i have no idea how to do it.....please help....

As the article outlines, just add the lines you want.
- Leo
21-Jul-2009

Posted by: miaka at July 20, 2009 10:17 AM
Comment Page:  1  |  2 
Read the article that everyone's commenting on.
RSS feed Subscribe to the RSS Feed for comments on this article.
Post a Comment

Question? Ask Leo!