Windows Firewall Control (WFC) by BiniSoft.org

Discussion in 'other firewalls' started by alexandrud, May 20, 2013.

  1. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    Thanks for explaining that! I suppose i'll just leave them be if that's the best thing to do?
     
  2. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    @alexandrud
    @all


    Thank you, Alexandru and Binisoft.org-Team, for this really great software and your always very good support!

    I wish you all merry Xmas and a happy New Year :thumb:

    Alpengreis
     
    Last edited: Dec 25, 2014
  3. guest

    guest Guest

    I mean something really automatic, without user intervention
     
  4. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    But please not as non-configurable option. Because then it would delete "temporary" invalid rules too - for example rules for portable programs on USB sticks.
     
  5. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    @alexandrud

    - About the system variables ...

    You have already implemented the support for system variables such as %ProgramFiles%. So far so good.

    Would it be possible to change this, that the variables stay? Because after edit a such rule within WFC, the variable is transformed.
     
  6. Kob

    Kob Registered Member

    Joined:
    Dec 13, 2011
    Posts:
    39
    Feature request:
    When a new program attempts to connect to the internet, a wfc's pop-up window appears asking for user's approval. My request is to make that window "always on top".

    The other day I updated my WIN7 installation using the "Windows Update" service, and when an update wanted to run its exec I wasn't aware that wfc was blocking it - the pop-up was under the update installation window.

    In case that this would be difficult to reliably implement (there are various levels of "on top"), maybe to flash the wfc icon in the tray to draw attention when the approval pop-up awaits for a user's response?
     
  7. Tony

    Tony Registered Member

    Joined:
    Feb 9, 2003
    Posts:
    725
    Location:
    Cumbria, England
    There is a checkbox in notifications settings to "display notifications on top of other windows"
     
  8. iammike

    iammike Registered Member

    Joined:
    Jun 13, 2012
    Posts:
    345
    Location:
    SE Asia
    I don't think he can as WFW converts it to the real path, so it's not Alexandru his programming ;)

    A workaround (but I doubt desirable) would be

    Put in Variable, WFW converts it to real path, when the rule is opened in WFC4, WFC4 converts it back to a variable. Desirable / Possible ?

    But as with everything, I could be wrong :thumb:

    Respect
     
  9. max59

    max59 Registered Member

    Joined:
    Dec 27, 2014
    Posts:
    1
    Feature request:
    please make the shell extension for windows explorer language dependent

    Currently it is fixed to
    "Allow through Windows Firewall" and "Block through Windows Firewall"

    Thanks for your superb work
     
    Last edited: Dec 28, 2014
  10. JimmySausage

    JimmySausage Registered Member

    Joined:
    Apr 11, 2010
    Posts:
    55
    Why does WFC keep asking for the same permissions all the time. I have already clicked always allow or deny?
     
  11. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,412
    Location:
    Romania
    It is not a good idea to automatically delete such rules. Maybe some of them are created for files from removable drives which are not always connected. The user must review all the rules that are not required anymore and delete them manually. Anyway, if invalid rules exist they don't do any harm, so even if they are there, they are not applying.
    Not really possible. Once the rules are created when I query them from Windows Firewall API, they all come with the full path. I can't know which were created with the system variables and which had the full path. I will check if there is a workaround for this.
    Not really possible with the current implementation. I will see if I can do this in a different manner.
    What other security products do you use ? Do you have any NDIS driver or a software proxy enabled on your computer ? From your description this is the problem.
     
  12. JimmySausage

    JimmySausage Registered Member

    Joined:
    Apr 11, 2010
    Posts:
    55
    Would SandBoxie create this problem?
     
  13. myk1

    myk1 Registered Member

    Joined:
    Sep 2, 2012
    Posts:
    157
    Location:
    Belgium
    Hi Alexandrud,
    I am a registered owner of your soft.
    Shields Up says that:
    GRC Port Authority Report created on UTC: 2014-12-30 at 22:02:06
    Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
    119, 135, 139, 143, 389, 443, 445,
    1002, 1024-1030, 1720, 5000
    0 Ports Open
    26 Ports Closed
    0 Ports Stealth
    ---------------------
    26 Ports Tested

    ALL PORTS tested were found to be: CLOSED.

    TruStealth: FAILED - NOT all tested ports were STEALTH,
    - NO unsolicited packets were received,
    - A PING REPLY (ICMP Echo) WAS RECEIVED.

    For them it is not ok!
    What do you advise?
    Thanks, P.
     
  14. Broadway

    Broadway Registered Member

    Joined:
    Aug 16, 2011
    Posts:
    211
    A ping reply is no security problem. If you have installed WFC with default recommended rules you will have a rule that explicitly allows PING replies.
    Search for " WFC - Internet Control Message Protocol" to find the rule. You can try to disable/block in order to be totally stealth.
    But if you are behind a router, the ping requests coming from outside your home network are handled by the router.
    Then it is up to your router software.
    HTH :)
     
  15. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
    Hi, I'm new to firewall technology and interested in learning about Windows Firewall for soho/personal usage, behind a simple home router. After learning Windows Firewall I want to use this program.
    Could anyone point me in the right direction, perhaps a book or website for newbies? TIA
     
  16. DX2

    DX2 Guest

  17. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
  18. Broadway

    Broadway Registered Member

    Joined:
    Aug 16, 2011
    Posts:
    211
    Have you already checked the developer's website?
    There is a lot of information, as well as a link to a video on Youtube:

    http://www.binisoft.org/wfc.php

    HTH :)
     
  19. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,796
    Location:
    .
    Thank you but what I'm looking for is to learn the very basics of Windows Firewall itself not WFC. I already know WFC is the front-end (user friendly gui) to manage Windows Firewall and this is not what I'm looking for.
    See, there are a lot of rules and while looking at this thread the author says I still need to learn from other sources the meaning and functioning of each tab, i.e. IPsec and its settings, protocols, etc. For example, on "Customize IPsec Defaults" I don't know the meaning of Key Exchange, Data Protection, Authentication Method (Kerberos v5) and so on. I need to learn from scratch at the very basics to the advanced stuff but oriented to Windows Firewall (not planning to use any 3rd party soft) and for soho/personal use.
    I believe there must be a book/s covering these topics.
    Anyway this is my last post as this request of mine is going off-topic. Thanks a lot to all of you.
     
  20. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    Idea / future request ...

    The WFwAs-GUI displays (not editable) also rules which are created through Group Policy Editor (GPEdit.msc).

    Would it be possible to integrate this also in WFC?
     
  21. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    Damn you Microsoft, not all Windows 7 versions include Group Policy Editor. Argh...
     
  22. Alpengreis

    Alpengreis Registered Member

    Joined:
    Oct 7, 2013
    Posts:
    670
    Location:
    Switzerland
    There are possibly ways to retrofit GPEdit - have a look to google or so - but I do not know if it is legal - probably unofficially anyway.
     
  23. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    Yeah, there is a retrofit option, but it doesn't provide all of the GPE folders... the ones that are missing are the ones that are worth tweaking.
     
  24. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    I have a question about merging rules...
    Windows 7 Home Premium 64bit + WFC 4.2.1.0

    I can't seem to get WFC to create the merged rule, even after I correct the errors (red sections).

    I select the rules I want to merge, then click on "merge rules (x = number of rules selected)"...
    I correct the errors highlighted in red (mainly port numbers) and fix the description...
    I double check everything, then click on "create"...

    ...but nothing :( Am I missing a step?
    I've tried merging rules with the same port numbers and mixed port numbers, but get the same invisible result... I have included a print screen of the rules I want to merge. Thanks in advance for feedback!

    EDIT: The third rule in the list has ports 80 and 443 listed. That one I merged manually (removed one rule and modified the second to include 2 port numbers).
     

    Attached Files:

  25. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    Knew I forgot something too... hope this helps with the constant IE alerts... seems to be clashing a bit with PeerBlock.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.