OK I see, and that's why SS probably doesn't disable the Win Firewall, because it only takes care of blocking outgoing connections and the accepting of incoming connections. I never really thought of this, so it's a bit different compared to ZoneAlarm for example. That's another controversial discussion. I haven't seen anything weird so far, but if you think like that, you probably shouldn't be running Windows at all.