Windows 10: Windows 10 Firewall: Invisible Block Rules

Hi all,

Today I was messing around with Windows Firewall rules and created a rule to block all incoming ICMP traffic to my Windows 10 host. I tested the rule by trying to ping my host from a different device and it was blocked. I also confirmed this from the Firewall logs showing it was dropping all ICMP packets from my other device. So far so good!

I then wanted to delete the rule as I was done testing but it doesn't appear in the 'Inbound Rules'. In fact, the Inbound rules only show rules where the Action is 'Allow'.

What I have tried so far:

- All filters set to "Show all" within the Firewall

- Created the same rule again, which also doesn't show up

- Created a rule that allows the program, shows up

Any solutions? Are Block rules stored in a different location?

submitted by /u/ClassicLower
[link] [comments]

:)

 

firewall rule to block addresses NOT on an IP list?


I am just starting to learn the Windows Firewall (working on both Windows 7 and 10) and I'm not impressed with the inflexibility of its rules. I would like to know if


1. Is there is a way to do what I want with Windows Firewall?
2. Is there is a third-party firewall that would do it?


What I want to do is create a rule that blocks outgoing connections, for program X, that are to a destination **NOT** in an IP list.


Windows Firewall is not very flexible in how you specify IP list rules. When you give an IP list, your rule will match that list... you can't say "trigger the rule for non-matching IP addresses." Therefore to allow outgoing connections to a list, you have to


1. Change the entire firewall policy to block outgoing connections by default so that you can create an "allow rule" matching your list. This will mess up the rest of your programs.


2. Somehow combine a block rule and allow rule. Create a block rule for most traffic, with the "allow" rule overriding it when appropriate. However, this doesn't appear to be possible in general. It **may** be possible for connections that use IPSec, I'm not sure. And I'm not sure if I can use IPSec in my application.

And is there a third-party firewall that can do it? Most 3rd-party firewalls are LESS sophisticated than Windows Firewall, because the use case they are addressing is providing an interface that doesn't require much comprehension. I need one that's actually MORE sophisticated than Windows Firewall.

 

Windows Firewall: Doesn't show blocking rules

Hello!

Today I've blocked all connections of a program by creating a outbound rule in Windows Firewall. However, I now wish to remove it. The problem: I can't find that newly created rule anywhere in the list. The rule does take an effect, since deactivating the
Firewall lets the program run properly. I can only see rules in the list that "allow" stuff, but not those who block things.

What I have tried so far:

- All filters set to "Show all" within the Firewall

- Created the same rule again, doesn't show up

- Created a rule that allows the program, shows up

Any solutions?

 

Windows Firewall: Doesn't show blocking rules

I must remain unconvinced you have created an invisible outbound firewall rule.

(1) What program is the subject of the rule?

(2) What buttons are you clicking to create the rule?

(3) What feedback did you get immediately after creating it - do you see it then?

Here is a good write-up on the windows Firewall...

https://www.online-tech-tips.com/windows-10/adjust-windows-10-firewall-settings/

Adjust Windows 10 Firewall Rules & Settings

Note: That's a 3rd-party site. Looks smart, but I know nothing (good or bad) about any links or downloads that may be there - nor whether they will create invisible rules of their own on your
machine.