One question about Windows Firewall

[svarnkster]

I don't understand one thing about custom rules in Windows Firewall.

I'm having a hard time articulating this in my head, so bear with me.

When creating a custom rule, one has the option to specify a program. Say I specified the correct program and port. But then, in the services section, the default setting is to "Apply to ALL programs and services". What does that even mean? Does that mean that I'm allowing inbound connections on said port for all programs and services? Then what's the point of specifying an individual application, if the rule is applied to all programs and services? Understand?

I'm assuming that "all programs and services" refers to those being used by the program I specified, but I'm not sure.

I'd appreciate it if someone could explain this to me.

 

[svarnkster]

After testing at GRC's Shields Up, I've decided that the port is indeed not only opened for the program, but for any program or service as well. Windows Firewall doesn't work like Comodo, which refuses any incoming packets sent to any application or service that do not explicitly allow inbound connections.

So when you open a port in Windows Firewall for a certain program, it only stays open when that program is open, but it opens that hole to your entire system when that program is open, to all programs and services- unless you allowed only one service. There's no option to allow no services.

 

[Capt.Jack Sparrow]

I don't understand one thing about custom rules in Windows Firewall.

I'm having a hard time articulating this in my head, so bear with me.

When creating a custom rule, one has the option to specify a program. Say I specified the correct program and port. But then, in the services section, the default setting is to "Apply to ALL programs and services". What does that even mean? Does that mean that I'm allowing inbound connections on said port for all programs and services? Then what's the point of specifying an individual application, if the rule is applied to all programs and services? Understand?

I'm assuming that "all programs and services" refers to those being used by the program I specified, but I'm not sure.

I'd appreciate it if someone could explain this to me.

Hello Welcome to SF,

Maybe this might help Windows Firewall with Advanced Security and IPsec

Good Luck,
Captain

 

[karlsnooks]

For the complete list of documentation for Windows Firewall with Advanced Security and IPsec, see the Windows Firewall with Advanced Security TechNet Library at Windows Firewall with Advanced Security and IPsec.

 

[animex]

save yourself the headache and simply get yourself a good third party firewall. zonealarm, kaspersky are a couple of really good ones.