Windows Firewall Control (WFC) by BiniSoft.org

Discussion in 'other firewalls' started by alexandrud, May 20, 2013.

  1. focus

    focus Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    503
    Location:
    USA
    Just create the rule with all ports/addresses allowed? If you look at the rule on the rules panel these sections would be blank.
     
  2. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    If all ports/addresses are allowed, this is not a rule anymore...basically all is open.
     
  3. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    It would be a rule that will allow all connections for that specific application.
     
  4. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    Will not work.
    Here is an example:

    Mbamservice.exe (from Malwarebytes) is accessing on TCP443 "telemetry.malwarebytes.com" which is somewhere between 52.0.0.0 and 52.31.255.255 (and I want to block it)

    At the same time Mbamservice.exe is accessing "keystone.mwbsys.com" on TCP443 for license check , which can be between 52.0.0.0 and 52.31.255.255 (and I want to allow it)

    So, how can be done?
     
  5. peter_brown_usa

    peter_brown_usa Registered Member

    Joined:
    Aug 20, 2014
    Posts:
    26
    Hi,
    The other day my Win10 did the latest win10 update. Yes I got the issue with the logging which was sorted by untickig/ticking etc but this is not my current issue.

    The update put lots of extra entries into the rules for all sorts of Microsoft stuff including things like Candy Crush Saga (Arghhhh). Since the update Edge is being blocked for some reason and no matter what I try and create new rules it's keeps getting blocked and showing up in the blocked connections.

    I have tried everything, deleted rules, create rules but nothing is making Edge work.

    Is there a way to find out which actual rule is blocking? I am asking as I can not see any blocking of edge in the rules etc
    Thansk
     
  6. Poppeye

    Poppeye Registered Member

    Joined:
    Mar 2, 2018
    Posts:
    5
    Location:
    Internet
  7. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    2,068
    Location:
    Serbia
    You've run into a paradox there. You can't allow and block a process at the same time.
    The way you want to approach this is to allow all remote addresses through remote port 443 for mbamservice and then use hosts file (or a 3rd party URL blocker) to block specific URLs.
     
  8. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    Yes , this is the approach if I want to continue to use WFC
    Or I can switch to a firewall which allows FQDN rules.
     
  9. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    2,068
    Location:
    Serbia
    I have not used a 3rd party firewall in years so I may be wrong, but I doubt there are any software firewalls left that do this. If there are, I think the price tag would be accomodated accordingly.
     
  10. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    PC Tools Firewall Plus is doing that and i is free.(but unsupported ) see attached (the rule is FQDN , not IP.)
     

    Attached Files:

  11. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    2,068
    Location:
    Serbia
    LOL. That was one serious software firewall. Look'n'Stop interface. I remember this, long ago, Look'n'Stop was rebranded into PCTools. It wasn't a bad firewall even before rebranding. Sadly, the software firewall market has gone way down long ago.
    [EDIT]This really must have been a very long time ago. Now it more resembles Outpost. But I clearly remember rebranding. Who knows what's going on there.
     
    Last edited: Oct 21, 2018
  12. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    You are asking for something that Windows Firewall does not support and it has nothing to do with WFC. Windows Firewall does not support creating firewall rules for domain names, only IP addresses and IP ranges are supported. WFC can't add support for this since WFC does not even do any packet filtering.
     
  13. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    That I understand.
    I was asking about a way in which I may still use WFC to achieve the desired results. The deeper I go in firewall theory , the deeper I figure out that Windows firewall (and consequently WFC) are not adequate for today environment as a layer of protection: the inability to prevent parent launching child and rules based on FQDN are two of the reasons.
     
  14. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    It depends on your expectations. For the inability to prevent parent launching child, you already know my opinion. As for domain named based rules, Microsoft should implement it in Windows Firewall. You can use the hosts file to block certain domain names. However, when it comes to Microsoft, they will bypass hosts file when it comes to their own telemetry. So, the answer would be Linux for an increased security feeling.
     
  15. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,103
    Location:
    Lunar module
    Is it already included in Microsoft plans, or is it just a wish?
     
  16. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    I don't know, but Windows Firewall has control over outbound filtering since Windows Vista, so if they had this in plan, they would have done this until now.
     
  17. max2

    max2 Registered Member

    Joined:
    Sep 22, 2011
    Posts:
    374
    Is anyone staying with WFC ? I still like it but sad it was bought out by malwarebytes to integrate into their malware software. I have feeling the stand alone of WFC will soon stop working after a year or 2 :( I thought about going to Glasswire but don't like it :( Wish there was something else like WFC out there free or paid.

    Malwarebytes 3 is a nightmare in my opinion of course.
     
  18. popescu

    popescu Registered Member

    Joined:
    Sep 1, 2018
    Posts:
    259
    Location:
    Canada
    Why worry 2 years in advanceo_O Just use WFC and see what happens...

    I have been using MBAM v 3 for a while. Is not bad, however , never detected anything before my basic antivirus (MSE)
     
  19. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    I'm staying with WFC :) Most of WFC features were implemented many years ago and they are still working. As I mentioned before, if a critical bug will appear that will make WFC unusable, a new version will be published to fix the issue. The standalone WFC is currently freeware, fully functional and only 3 months old. This is not abandonware. As for the integration concern, WFC will remain a standalone product. Parts of WFC technology will be included in other Malwarebytes products, in the future.
     
  20. Special

    Special Registered Member

    Joined:
    Mar 23, 2016
    Posts:
    454
    Location:
    .
    Respect.
     
  21. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    OF COURSE I still use the stand alone WFC! Why should I no more use a such great software?! Additionally, the developer do not let us down!
     
  22. subferno

    subferno Registered Member

    Joined:
    Oct 3, 2004
    Posts:
    92
    I just updated to the latest version of WFC. During the installation, it mentioned potential incompatibility with Kaspersky AV. What is the resolution to this? Disable Web AntiVirus? Disable port monitoring 80?
     
  23. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Totally awesome-generous and should relieve anxiety where some are expressing uncertainty over the standalone version. :thumb: Onward she goes.
     
  24. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,103
    Location:
    Lunar module
    Do nothing, just keep using.
     
  25. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,413
    Location:
    Romania
    WFC installer gives that warning if it finds another firewall registered in Windows Security Center. Do nothing but if you encounter connectivity problems, be aware that Kaspersky filtering might interfere with Windows Firewall. That's all.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.