Advanced Plus Security ErzCrz Security Config 2025

[ErzCrz]

Just a quick not for those using WFC. You can still deploy @Andy Ful 's Firewall hardening and it will still block the connection even if you create an allow rule for it in WFC.

I created a block rule for Firefox via the Firewall Hardening Tool and have allow rules in WFC but connection still blocked See below.

 

[oldschool]

Just a quick not for those using WFC. You can still deploy @Andy Ful 's Firewall hardening and it will still block the connection even if you create an allow rule for it in WFC.

I created a block rule for Firefox via the Firewall Hardening Tool and have allow rules in WFC but connection still blocked See below.

I believe this is because rules written directly in Windows Firewall, including rules written in GPO, take precedence over 3rd party FW that use WFP.

Unlike most other Firewall programs, Minimal Firewall acts as a frontend, avoiding enlarging your computer's attack surface by playing around with lower levels of the WFP. ... When you use a WFP app, it acts as a filter on top of Windows Firewall. The problem is that Microsoft sets varying levels of importance to its firewall rules (e.g. those changed in group policy editor or related to Windows Defender may have higher importance). So if the filter and Windows Firewall rules conflict, it's not clear which one supercedes the other. Minimal Firewall avoids this by working directly with Windows Firewall without having to shut off this key part of your Windows security.

 

[Victor M]

WFC is just a shell, giving you a different UI, for modifying windows firewall rules.

 

[oldschool]

WFC is just a shell, giving you a different UI, for modifying windows firewall rules.

Indeed. But MS's own rules, and rules written to registry as with @Andy Ful's Firewall Hardening Tool or with GPO, take precedence over all other rules.

 

[Parkinsond]

Indeed. But MS's own rules, and rules written to registry as with @Andy Ful's Firewall Hardening Tool or with GPO, take precedence over all other rules.

I think block rules, regardless in WFW or in 3rd party FW take precedence over allow rules.

 

[oldschool]

I think block rules, regardless in WFW or in 3rd party FW take precedence over allow rules.

You may be right. I'm no firewall expert.

 

[ErzCrz]

For some reason I'm being just as indecisive this year. Will probably drop CFW again since CyberLock is my default-deny currently and Dan's Ransomeware Guard is a useful tool. I am, for some reason, thinking about picking up Malwarebytes for a year and see how that goes though unsure if I'd have it replace MD or go along side it if I did. Emsisoft also an option though I think MB would be lighter.

EDIT: Having either won't add to things if I go MD, DefenderUI, CyberLock, RansomwareGuard and WFC. as those already cover bases. Just one of those weird weekends I think.

 

[Halp2001]

Will probably drop CFW again since CyberLock is my default-deny currently and Dan's Ransomeware Guard is a useful tool.

 

[ErzCrz]

Thanks. I can always use WFC if I want more firewall control with Windows Firewall.

 

[ErzCrz]

Picked up ESET Security Essentials aka ESET Internet Security. CyberLock will run along side it without issue and RansomewareGuard may or may not be needed but I don't see any conflict either.