Serious Discussion Fort Firewall

[tnodir]

Fort Firewall 3.19.9

• UI: Options: Add "Disable command line management" flag (#667).
• UI: Rules: Fix windows closing (#664).
• UI: Rule: Parse '|' as new line.

 

[Parkinsond]

Is this rule blocking all inbound traffic?

 

[tnodir]

Is this rule blocking all inbound traffic?

It will block all "filter-able" inbound traffic.

There are "Filter local ..." flags in the Options: IP Addresses: LAN, which are ticked off by default.
So the LAN addresses are always auto-allowed by default.

Also this rule will block all incoming ICMP requests too, so you can't ping your machine from Internet (if you are not behind router).

(local_port() is redundant here.)

 

[Parkinsond]

(local_port() is redundant here.)

Should I replace "local_port" with "port" to work?
I want when allowing program to connect, to have only outbound traffic, while blocking all inbound one.

 

[tnodir]

I want when allowing program to connect, to have only outbound traffic, while blocking all inbound one.

Only "dir(in)" is sufficient to block all incoming connections and requests for all protocols (UDP, TCP, ICMP etc) to any local port (1-65535).

 

[Parkinsond]

Only "dir(in)" is sufficient to block all incoming connections and requests for all protocols (UDP, TCP, ICMP etc).

Thank you; I will modify the rule.

 

[Andytay70]

@tnodir,
Loving the app. are you still working/updating this app?

 

[tnodir]

@Andytay70,
I'm on an extended sabbatical leave.

 

[Tachikoma]

To bad this is a good firewall ! Hope to see updates soon do you know when @tnodir ?
Thank you
~ Tachikoma

 

[Avethil]

this is a good firewall !

I agree with you. I have yet to try it but I prefer to wait for the implementation of "Ask to connect" filter mode. Serious Discussion - Fort Firewall and subsequent response from the developer.

 

[Parkinsond]

I agree with you. I have yet to try it but I prefer to wait for the implementation of "Ask to connect" filter mode. Serious Discussion - Fort Firewall and subsequent response from the developer.

Currently using with "block if not allowed" and termination of the first connection does not matter for me as the wildcard feature helps to not being prompted again for those with version number in path.

 

[Avethil]

As far as I know currently Fort Firewall doesn't support Allowing / Blocking a domain, globally or per application. It would be a welcome addition, in my opinion.