Why doesn't Windows Firewall show a notice on blocking like it's supposed to?

Discussion in 'other firewalls' started by allizomeniz, Feb 22, 2015.

  1. allizomeniz

    allizomeniz Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    901
    In Vista (or XP for that matter) I've never once been notified when WF supposedly blocks a program. I've looked and looked and can't find anything that really explains this issue and what can be done about it. Does anyone have the real scoop on this?
     
  2. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    784
    Location:
    UK
    I cannot answer your question but I have exactly the same thing on Win 7, I never get any notification of blocking from the native firewall and wondered about this myself.

    Gordon
     
  3. Robin A.

    Robin A. Registered Member

    Joined:
    Feb 25, 2006
    Posts:
    2,279
    In Windows 7 x64, I have received notifications occasionally. Check the configuration settings for the Activity Center.
     
    Last edited: Feb 22, 2015
  4. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,871
    I think you need to enable logging and view the logs to see the activities of windows firewall.
     
  5. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    784
    Location:
    UK
    Thanks I have it set to notify me but it doesn't.

    FW 1.png

    Gordon
     
  6. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    784
    Location:
    UK
    Thanks, but surely logging is not the same as 'notification'.

    Gordon
     
  7. allizomeniz

    allizomeniz Registered Member

    Joined:
    Aug 23, 2009
    Posts:
    901
    I'm starting to think what WF means by "Blocks a program" is much different than what I think it is. It probably notifies in special circumstances. I've been expecting it to notify like most of the third-party firewalls, but it must work silently most of the time, at least when default settings are used.
     
  8. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,026
    Location:
    The Netherlands
    Good question, I also wondered about the same thing on Win 8, but I never bothered to do any research. I also got a feeling that it doesn't really alert like regular firewalls.
     
  9. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,984
    Location:
    Canada
    It only warns when a program is blocked attempting to accept incoming connections, where it's behaving like a server. There are no warnings for blocked outgoing attempts.
     
  10. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    See above, but I believe it still does its job right.
     
  11. RockLobster

    RockLobster Registered Member

    Joined:
    Nov 8, 2007
    Posts:
    318
    I haven't seen a blocking alert from the firewall in years I don't know why either. I do remember there was a lot of criticism about the firewall when it was first released in Vista, it should have been a very good firewall but it seemed that MS saw fit to cripple it shortly before release by not including outbound alerts. As soon as I saw it I felt it was deliberate to ensure malware could phone home, most people seemed to think that opinion was just tin foil hat stuff then several years later Snowden revealed a few things...
     
    Last edited: Feb 23, 2015
  12. Yuki2718

    Yuki2718 Registered Member

    Joined:
    Aug 15, 2014
    Posts:
    1,257
    wat0114 is correct. Only problem for me is its log don't show what program tried to perform outbound connection.
    Default-allow outbound is IMO unavoidable, otherwise there will be too many troubles. One way is to build up smart decision based on whitelist, blacklist, and some kind of heuristics but that's too much for Win FW as basic FW, and I think many advanced user don't want that. If you don't like, change setting to block outbound connection and adjust rules so that only necessary connection can be made.
     
  13. ghodgson

    ghodgson Registered Member

    Joined:
    Dec 20, 2003
    Posts:
    784
    Location:
    UK
    Thanks for the explanation guys, I understand more fully now.

    Yuki2718 ....
    Yes I already block incoming and outgoing connections that don't match a specified rule.

    Gordon
     
  14. wat0114

    wat0114 Registered Member

    Joined:
    Aug 5, 2012
    Posts:
    1,984
    Location:
    Canada
  15. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    3,871
    Microsoft would seem to go by the surmise that if anything non-legit is on your system making outbound calls then your anti-malware is at fault rather than the firewall.

    Incidentally the in built firewall on linux runs pretty much the same way although on linux there are more controls over outbound connections.
     
  16. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    2,969
    Location:
    U.S.A.
    I believe that is true only for application programs. I have had incoming blocks from svchost.exe and not a peep from the WIN 7 x 64 firewall.
     
Loading...