Windows 10: What is "DNS Server Forward Rule - TCP/UDP 645HD8HD73BD83H-DH73D37-D37DG3"???

Hello Everyone,


Is there anyone who may provide an explanation to my query? I have never seen a Windows Firewall create its own set of Inbound Rules.

I have this showing up out of nowhere, without any idea how it was created:


"DNS Server Forward Rule - TCP 645HD8HD73BD83H-DH73D37-D37DG3""DNS Server Forward Rule - UDP 645HD8HD73BD83H-DH73D37-D37DG3"


They come in pairs, one for both the UDP and TCP protocol. At first I suspected a rootkit disguising its sent data as DNS traffic, am still unsure what this is. They all seem to be going through the standard Port 53, connections are stated to be allowed, nothing specified under Programs Tab.


My main question is, if this is a concern for malware/rootkit? I have also completely reset the Windows 10 PC via the "Clean all drives.." option, then reinstalled a new version of windows after that. These DNS rule have reappeared again.


Ps: the string of characters after TCP/UDP, shown in my example are fabricated, I did not post the real characters in case it represented something private. But they look something like that.


Is there anyone that can help?


Thanks.

:)

 

WIN10 Firewall Rules - found 70 different DNS Forwarding Rules? - VIRUS or?

Hello,

while investigating a problem in Windows 10 - which is now solved and solution is unrelated to this question -

I checked the list of Exceptions in the Windows Firewall.

Among the many entries there are

70 different

DNS Forwarding Rule - TCP - xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx-0 Private ON Public ON

(or UDP)

Does anyone know how these Rules come about and what purpose they serve?

Could this be some malware redirecting web-addresses?

Or could it be related to the Windows-Insider Program? (no answer on this there).

Regards,

Andreas

 

Found some strange "apps" in my Firewall > Apps

The apps had access to Private and Public and are called:

DNS Server Forward Rule - TCP - (long string of numbers and letters)

DNS Server Forward Rule - TCP - (long string of numbers and letters)

DNS Server Forward Rule - UDP - (long string of numbers and letters)

DNS Server Forward Rule - UDP - (long string of numbers and letters)

Hope its nothing but you never know.

EDIT: I cannot remove them. The remove button is grayed out.

 

How to configure Port Forwarding?


HI,

My router gets different IP addresses. Dynamic DNS is enabled.

I have to configure port forwarding in my router. While configuring port forwarding, I need to fill following details:

• Internal IP
• Internal Port
• Remote IP
• External Port
• Protocol (TCP/UDP)

Please guide me to configure Port Forwarding in my router.

Regards
UGN