Thank you @tnodir. @TairikuOkami, please, on same question: If I well understood, 127.0.01, [::1], 255.255.255.255, [ff02::1:2] etc are internal...
Hi @tnodir, My goal is to harden privacy/security firewall (software), using a minimalist setup with the best possible result: 1) Deny all...
Thank you @TairikuOkami for your great explanations, links and codes. With regards to what I call "Remote Addresses" 127.0.01, [::1],...
Understood. Thank you @TairikuOkami . Please I'll appreciate a lot if by chance you can answer the last part of my question: 127.0.01, or [::1],...
Great! I'll keep only 465. Thank you. Wow, coming from you, your opinion means a lot for me. Thank you. Final question (I promise!): Firefox is...
Understood. Thank you. My second approach (please see my previous message) was suggested to me (in other forum) by "an expert" in firewall rules....
Hi @TairikuOkami , Firstly and just remembering, my firewall software gold rule is "deny everything" by default. Few Windows processes (Windows...
Thank you for your help. I would say that I need steps to achieve what I want. My first step is to define if I'm going to use DNS-client enabled...
I'm working with a group of users in different countries, so I can't use IPs in firewall rules. I can use only protocols, in, out, port and...
As explained in previous comments, the goal here is not to use firewall rules as the "ultimate antivirus/antimalware". My intention is to use...
I use DNSCrypt, but unfortunately lot of programs request lot of different UDP in, out, ports etc. But again, in my case this happens only with...
Exactly! Many years ago DNS-client was useful as dns cache. Nowadays isn't needed anymore. And it became a privacy issue. Exactly, again! Many...
At present moment I'm testing different firewall software but with Windows DNS-client service disabled. I don't know "why", but empirically...
Please don't ask me "why" but depending on the firewall software, svchost needs TCP/UDP settings, otherwise apps/programs do not start. Also,...
Great help. Thank you! Of course, I can't use your settings, but thanks to your explanation now I have a better understanding of your logic. So,...
Please if possible, I still would like to receive your answer to my message Apr 27, 2022. As I wrote that day, I have the feeling you're the...
Thank you always for your help. On my tests, once the firewall software is set to "block all", and after allowing network access only to few...
Thanks!
I am a Physicist, I have good computer skills, I work with a large group of colleagues, and for reasons not worth addressing now, we need strong...
Bottom line... you're right. But in real world you must be prepared to interact with a majority of users that have Windows. This is the case of my...
Yeap, these are 3 alternatives... and I'm analyzing/testing all of them + another (several) similar software. Thank you both for your help.
Thanks again for your replay. My challenge is to find a 100% pure firewall (Windows Firewall or third-party firewall software), minimalist...
Yeap! And this is good for privacy. But the focus of my question is security.
True. But as I said, hardening firewall is not for average users, and it's ton of work if you have lot of different devices. That said, before...
Thanks. After asking lot of people, and after receiving lot of help, the conclusion seems to be that limiting internet/network access to...
Separate names with a comma.