Windows 10: I create a new rule Windows Defender Firewall for outgoing and incoming traffic, a rule to...

Hello, I create a new rule Windows Defender firewall for outgoing and incoming traffic, a rule to block all protocols etc. for PowerShell.exe application, will something get broken from Microsoft? I have Windows 10 PRO 21H1 x64. Let someone who has done something like this or an eminent theorist answer. Others let them do a test setup and answer after three days, after three weeks and after a month. It is possible to answer after three days and indicate that only three days of the test have passed. Greetings Jan

:)

 

Windows 2012 Server - Creating an exception for a block rule in the firewall

Hy, ya'll!

I have to deploy a rule to block all outbound traffic towards port TCP 80 regardless of the destination IP, so I set up an outbound "block" rule in the Windows Firewall specifically against that port. it was straightforward and works like a charm. However,
I can't seem to find a way to add one single IP as an exception to this rule.

I tried creating a new rule allowing all traffic to the IP I'm attempting to whitelist but, from what I can gather, the blocking rules in the Windows firewall take precedence over "allow" rules so that explains why it didn't work.

How can I work around this? All I need is to block outgoing traffic to TCP 80 on all but one IP.

Thanks!

 

firewall rule to block addresses NOT on an IP list?


I am just starting to learn the Windows Firewall (working on both Windows 7 and 10) and I'm not impressed with the inflexibility of its rules. I would like to know if


1. Is there is a way to do what I want with Windows Firewall?
2. Is there is a third-party firewall that would do it?


What I want to do is create a rule that blocks outgoing connections, for program X, that are to a destination **NOT** in an IP list.


Windows Firewall is not very flexible in how you specify IP list rules. When you give an IP list, your rule will match that list... you can't say "trigger the rule for non-matching IP addresses." Therefore to allow outgoing connections to a list, you have to


1. Change the entire firewall policy to block outgoing connections by default so that you can create an "allow rule" matching your list. This will mess up the rest of your programs.


2. Somehow combine a block rule and allow rule. Create a block rule for most traffic, with the "allow" rule overriding it when appropriate. However, this doesn't appear to be possible in general. It **may** be possible for connections that use IPSec, I'm not sure. And I'm not sure if I can use IPSec in my application.

And is there a third-party firewall that can do it? Most 3rd-party firewalls are LESS sophisticated than Windows Firewall, because the use case they are addressing is providing an interface that doesn't require much comprehension. I need one that's actually MORE sophisticated than Windows Firewall.

 

Windows 10 Firewall Incoming Rules

I created an incoming rule set on one of our workstations and then exported the firewall config. I imported and set the config in Group Policy and applied it to a test set of workstation. I set the setting so that admin changes on the machine would not
merge with the GPO policy. After this was done Microsoft still has a bunch of rules enabled. I have disabled them and then came back to them being enabled again. Are there certain rules that Microsoft requires be enabled on the firewall, or do I really not
have the control over the firewall that I should?