Windows 10: Inbound Firewall Rule that Blocks

Please help me understand how the 2 Inbound Rules created by MMC actually operate.

Action, Enabled, Service, Program, Protocol
Block, Yes, Any, C:\windows\system32\mmc.exe, TCP
Block, Yes, Any, C:\windows\system32\mmc.exe, UDP


If these 2 rules were Outbound Rules, I'd say that client process 'mmc.exe' is blocked.
But applying equivalent logic (that 'mmc.exe' is blocked) to Inbound Rules doesn't make sense -- why would 'mmc.exe' (which created these Rules) block itself?
What (somewhat) makes sense is that 'mmc.exe' is a requester, and that these rules block all TCP & UDP datagrams & all processes.
If so, then there's quite a difference between Outbound & Inbound Rules.
In Outbound Rules, 'Program' specifies the target (the process that's blocked), whereas in Inbound Rules, 'Program' specifies the requester (the process that provokes blocking).
This is crucial reasoning because, if correct, then, as a consequence, every process is the target of Inbound Rules that Block.

What about Inbound Rules that Allow? I've always assumed that an Inbound+Allow means the specified 'Program' installs a listener (i.e., has handler(s) for the specified socket(s)).
I think that's pretty straightforward.

Does anyone know of an architectural reference or guidebook that explains how Firewall Rules are implemented in a running system?

I've read what Microsoft provides and it's grossly inadequate -- what a surprise, eh?
Microsoft documentation presents only trivial explanation of how to complete the fields (example: "Type the path to the program in the text box"), or the tutorial's scope is limited (example: "On the Action page, select Allow the connection, and then click Next" -- no mention of "Block the connection").

Other web hits are just plain wrong (examples: "Program – Block or allow a program"; "Program - creates rule that controls connections for an app or program"; "if you are downloading a file through BitTorrent, the download of that file is filtered through an inbound rule" -- Rules control connections, not streams) or show ridiculous cases (example: "I want to block all outgoing connections on port 80").

A good reference begins each section with a statement of a problem that needs to be overcome.

The reference I seek will not explain how to fill out the dialogs to create a Firewall Rule, but Will talk about processes & software (network stack) components and what settings address them.

:)

 

Windows firewall: e-mail is on, yet inbound port 143 (imap) is blocked

Hi Cacadril,

We appreciate you for being a part of Windows 10.

Before proceeding, we need more information to help you better.

• 
  Are the computer connected to domain network?
  
• 
  Which are the email accounts you are working on? Is it Outlook.com/Office Outlook/other email accounts?
  

Until you get back to us with required information, I suggest you to refer to the suggestions.

Windows Firewall filters information coming into your PC from the Internet, blocking potentially harmful programs. Follow the below steps to access the interface and rules.

• 
  Open the start menu, type firewall in the search box and select
  Windows Firewall.
  
• 
  Click on Advanced settings on the left navigation pane.
  
• 
  Enter the admin credentials if any dialog box prompted.
  
• 
  In advanced settings panel, you may change the settings related to Inbound rules/Outbound rules/connection security rules/monitoring.
  

Note: If your PC is connected to network, you might not be able to change your Windows Firewall settings because of network policies. Contact your administrator for more information.

Kindly let us know the required information if you need any further assistance with the issue. We are glad to assist you.

Thank you.

 

Windows 10 adding inbound rules to firewall without asking my permission

Hi,

Windows 10 on my PC is adding apps to both inbound & outbound rules sets to the windows firewall without warning or asking for my permission.

The inbound rules it adds always allow inbound connections without warning and without asking for my permission.

I have the "Notify me when Windows Firewall blocks a new app" option selected but it still does it.

When I had this option selected on windows 7 (before I upgraded to win 10) I would get a notification box pop up with the option to allow or block inbound connections from new apps. However, I get no such notification on win 10 and it just adds & allows it
without my permission.

Deleting these inbound rules windows 10 added does not work, since after a reboot and starting any of those apps again it just adds a new inbound rule again allowing inbound connections again without asking my permission.

Setting the option to block any of these new inbound rules which win 10 added without my permission does not work either, because it just adds a another new inbound rule allowing connections & without asking for my permission.

Is there a way of getting this pop up notification box that asks for my permission to allow or block inbound connections like I had on win 7, to work on win 10?

Or is there any other way to stop win 10 from adding & allowing inbound connections to every single app automatically without any warnings & first asking for my permission?

It does this with any & all apps no matter if Microsoft or not, even Firefox.

Thanks in advance

Mark

 

Windows Firewall Forgetting Rules

I've recently installed the latest version of Windows 10 in my PC. I've blocked and allowed some softwares in Windows Firewall. But Firewall keeps forgetting the rules in 1/2 days. For example, I've allowed Pro Evolution Soccer 2016 in Firewall. But in a
few days, when I open the game, firewall sends message asking if I want to allow that app or not. Then after checking the allowed apps, I do not see that game in the list, which means firewall didn't remember the settings.

Also, I blocked KMPlayer in firewall to prevent it from connecting to internet (it shows too much ads otherwise). So, I created inbound and outbound rules for KMPlayer and blocked the connection. After that, it was all okay for two days, then again it started
showing ads, and then checking the rules, I didn't notice the rules there which I created two days ago. And this thing keeps happening. I make the inbound and outbound rules for KMPlayer, it stays all okay for a few days, and then it forgets again.

So, what is wrong with the firewall and what is the solution of it?

[Moved from: Windows / Windows 10 / Windows settings]