Even if do not know, you will ultimately learn by trial and error.
anirbandutta01's Security Config
- Thread starter anirbandutta01
- Start date
Let's be honest... most don't have the luxury of living in solitude and playing trial-and-error games like @Parkinsond the Legend!
No one gonna feed me knowledge in my mouth; I have to earn it.Let's be honest... most don't have the luxury of living in solitude and playing trial-and-error games like @Parkinsond the Legend!
Few changes has been done with dark reader remove from browser. Please share feedback.
Here's my updated PC config. Still I'm confused which Firewall ( not complex ) is good for me. Please give me feedback so that I can add a good one also enhanced my PC security. Thanks.
Firewall will not provide much protection, as malicious files can inject code into allowed system processes.
It only matters for blocking traffic for specific programs and processes vulnerable for abuse such as MS office, Adobe reader, and certain LOLBins.
Windows firewall will do the job; just use FirewallHardening tool to add the required rules, and you can manually add any extra rules.
Of course Windows firewall lack many basic features like notification for outgoing traffic and currently active connections, but it will be sufficient.
Last edited:
You can get the whole package, including firewallhardening tool, from here:
Hard_Configurator/WindowsHybridHardening at master · AndyFul/Hard_Configurator
GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
github.com
I would suggest @Andy Ful's Firewall Hardening tool. You may enable the "Block all incoming connections, including those in the list of allowed apps" Windows Firewall setting if you don't use file sharing, remote desktop, and game servers. You can manually allow a service you use that requires inbound connections.
Thanks. If new version released , does it have auto update feature or I have to new configuration file again and install again?You can get the whole package, including firewallhardening tool, from here:
Hard_Configurator/WindowsHybridHardening at master · AndyFul/Hard_Configurator
GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator
Okay, is there any guidance? Could you please share the configuration details?
Need no update; it does not run in background; only apply changes and exit the app.
Download and run the WHHLight_Tools package from the following thread. The package will extract WHHLight_Tools to the Program Data folder and create a shortcut folder on the desktop. The tools are portable. Run the "FirewallHardening" tool, add "H_C Recommended", enable the "Blocked Events" option, and close it. That's it! You can pin FirewallHardening to the taskbar and remove other tools from the shortcut folder.
Serious Discussion - WHHLight - simplified application control for Windows Home and Pro.
For the Windows Firewall setting, access Control Panel, System and Security, Windows Defender Firewall, Change notification settings, enable the "Block incoming connections..." option for both Private/Public network settings, and click OK.
Thanks for sharing your updated configuration, @anirbandutta01. You already have a strong foundation with ESET Internet Security as your primary AV, a good mix of browsers and DNS filtering, and you clearly value periodic second‑opinion scans.
A few suggestions that might help tighten things up:
• **Enable device encryption and strengthen credentials** – If you're not already using BitLocker (or the built‑in device encryption), it's worth turning it on for your system drives. Pair that with a robust Windows password or passphrase rather than a simple PIN so data is protected if the device is lost.
• **Use one password manager and MFA everywhere** – Bitwarden is a great choice; there's no real need to run two password managers. Make sure to enable two‑factor authentication on your Bitwarden account and on important services.
• **Review your VPN and scanners** – Running multiple free VPNs can fragment your privacy and may have bandwidth limits. Consider sticking with one reputable provider. Similarly, you probably don't need four second‑opinion scanners installed at once. Pick one or two you trust (e.g. ESET Online Scanner + Kaspersky Virus Removal Tool) and use them as needed.
• **Enable Smart App Control & Memory Integrity** – These Windows security features can help block unsigned or suspicious apps and protect against kernel exploits. You can find them under Windows Security > Device Security.
• **Keep firmware and OS up to date** – Make sure your router's firmware and IoT LTSC build are fully patched. Even a solid software stack won’t save you if the router OS is vulnerable. Also consider an interactive outbound firewall like simplewall or even ESET’s own firewall in interactive mode if you want to be prompted for unknown connections.
Overall you’re doing a lot right; just be mindful of overlapping tools and aim for simplicity with strong core defences. Hope this helps!
A few suggestions that might help tighten things up:
• **Enable device encryption and strengthen credentials** – If you're not already using BitLocker (or the built‑in device encryption), it's worth turning it on for your system drives. Pair that with a robust Windows password or passphrase rather than a simple PIN so data is protected if the device is lost.
• **Use one password manager and MFA everywhere** – Bitwarden is a great choice; there's no real need to run two password managers. Make sure to enable two‑factor authentication on your Bitwarden account and on important services.
• **Review your VPN and scanners** – Running multiple free VPNs can fragment your privacy and may have bandwidth limits. Consider sticking with one reputable provider. Similarly, you probably don't need four second‑opinion scanners installed at once. Pick one or two you trust (e.g. ESET Online Scanner + Kaspersky Virus Removal Tool) and use them as needed.
• **Enable Smart App Control & Memory Integrity** – These Windows security features can help block unsigned or suspicious apps and protect against kernel exploits. You can find them under Windows Security > Device Security.
• **Keep firmware and OS up to date** – Make sure your router's firmware and IoT LTSC build are fully patched. Even a solid software stack won’t save you if the router OS is vulnerable. Also consider an interactive outbound firewall like simplewall or even ESET’s own firewall in interactive mode if you want to be prompted for unknown connections.
Overall you’re doing a lot right; just be mindful of overlapping tools and aim for simplicity with strong core defences. Hope this helps!
Again few changes are made by me. Kindly share your feedback if anything required. Thanks.
You are now using Kaspersky Standard, which comes with a firewall and disables Windows Firewall. You should remove FirewallHardening; open it, remove the entries, and delete the folder.
Hello everyone 
I made few changes in my PC configuration. I'm planning to use a paid good VPN (Windscribe or Surfshark) in a few months later. Isn't it a good idea? Please share your valuable feedback.
I made few changes in my PC configuration. I'm planning to use a paid good VPN (Windscribe or Surfshark) in a few months later. Isn't it a good idea? Please share your valuable feedback.
You may also like...
-
Aries91's Security Configuration 2026- Started by aries91
- Replies: 14
-
Devjit’s Gaming PC 2026- Started by devjitdutta2025
- Replies: 44
-
-
Aries91's Security Configuration 2025
- Started by aries91
- Replies: 7
-
