How do I make a rule for INETINFO.EXE

[cooLkAffe]

Allright - re-defining my thread about rules creating...

I'm trying to make a rule for a client application. It must be able to make outbound connections at any port (TCP) where as inbound connections it's only for ports 6690-6693.

I authorized the application to allow it to connect to the internet and I added it in the 'applications...'-section of the rule editing. This is what I came up with - and please respond if it's correct or not, and if so - what I'm doing wrong. Thank you.

Screenshot:

[cooLkAffe]

I guess there's no need to answer this... as I'm right :D

[cooLkAffe]

And by the way... when adding rules like this (when you add to the Applications list) - does it then only apply to that specific application?

[cooLkAffe]

Although it seems like I'm only talking to myself ;) - this is what I've come up with about IIS only running on localhost.

In the 'Applications...' list I've added the following (as they automatically asked for authorization):

MS DTC console program
Internet Infomation Services

Screenshot:

[Frederic]

Hi cooLkAffe,

Yes, your first rule in the first post is correct.
If you added the application to the rule, the rule will be enabled only when this application is connected, but not specifically for the packets sent by this application. If this application is not connected, the rule is disabled and no application can send packets through these ports.

Regarding the last rule, actually the packet filter doesn't see what's happenning on the local interface (127.0.0.1), so this rule is not needed.

Frederic

[cooLkAffe]

Thank you Frederic :)

[cooLkAffe]

Hmm... on boot inetinfo.exe asks for authorization. If I block that the localhost server ain't working, so I think I have to make a rule anyway 'cause I don't want it to be able to access the net as well as others to be able to use the server from the outside...

[Frederic]

Hi,

You just need to add the application in the Application Filtering page, but normally no rule has to be created in the Internet Filtering page.

Frederic

[cooLkAffe]

Allright, I'll just do that.

Thank you :)