Serious Discussion Fort Firewall

[tnodir]

Fort Firewall 3.19.9

• UI: Options: Add "Disable command line management" flag (#667).
• UI: Rules: Fix windows closing (#664).
• UI: Rule: Parse '|' as new line.

 

[Parkinsond]

Is this rule blocking all inbound traffic?

 

[tnodir]

Is this rule blocking all inbound traffic?

It will block all "filter-able" inbound traffic.

There are "Filter local ..." flags in the Options: IP Addresses: LAN, which are ticked off by default.
So the LAN addresses are always auto-allowed by default.

Also this rule will block all incoming ICMP requests too, so you can't ping your machine from Internet (if you are not behind router).

(local_port() is redundant here.)

 

[Parkinsond]

(local_port() is redundant here.)

Should I replace "local_port" with "port" to work?
I want when allowing program to connect, to have only outbound traffic, while blocking all inbound one.

 

[tnodir]

I want when allowing program to connect, to have only outbound traffic, while blocking all inbound one.

Only "dir(in)" is sufficient to block all incoming connections and requests for all protocols (UDP, TCP, ICMP etc) to any local port (1-65535).

 

[Parkinsond]

Only "dir(in)" is sufficient to block all incoming connections and requests for all protocols (UDP, TCP, ICMP etc).

Thank you; I will modify the rule.

 

[Andytay70]

@tnodir,
Loving the app. are you still working/updating this app?

 

[tnodir]

@Andytay70,
I'm on an extended sabbatical leave.

 

[Tachikoma]

To bad this is a good firewall ! Hope to see updates soon do you know when @tnodir ?
Thank you
~ Tachikoma

 

[Avethil]

this is a good firewall !

I agree with you. I have yet to try it but I prefer to wait for the implementation of "Ask to connect" filter mode. Serious Discussion - Fort Firewall and subsequent response from the developer.

 

[Parkinsond]

I agree with you. I have yet to try it but I prefer to wait for the implementation of "Ask to connect" filter mode. Serious Discussion - Fort Firewall and subsequent response from the developer.

Currently using with "block if not allowed" and termination of the first connection does not matter for me as the wildcard feature helps to not being prompted again for those with version number in path.

 

[Avethil]

As far as I know currently Fort Firewall doesn't support Allowing / Blocking a domain, globally or per application. It would be a welcome addition, in my opinion.

 

[tnodir]

Fort Firewall 3.20.0

• UI: Rework App. Groups to Groups and per-program Speed Limits (#38, #93, #143, #210, #423, #479, #518).
• UI: Add Time Periods, used by Groups and Speed Limits (#173, #718).
• UI: Program: Add "Block Inbound" flag.
• UI: Improve Programs window (#704, #705, #707).
• UI: Improve Services window; Repair services reset by Windows Update (#641, #762).
• UI: Improve Connections window (#139, #708).
• UI: Add Turkish and Vietnamese languages.
• UI: Update SQLite to 3.53.4
• Driver: Speed Limits: Improve shaping accuracy (#435).
• Driver: Various fixes (#756).
• Other fixes (#709, #720, #749).

 

[Parkinsond]

Fort Firewall 3.20.0

• UI: Rework App. Groups to Groups and per-program Speed Limits (#38, #93, #143, #210, #423, #479, #518).
• UI: Add Time Periods, used by Groups and Speed Limits (#173, #718).
• UI: Program: Add "Block Inbound" flag.
• UI: Improve Programs window (#704, #705, #707).
• UI: Improve Services window; Repair services reset by Windows Update (#641, #762).
• UI: Improve Connections window (#139, #708).
• UI: Add Turkish and Vietnamese languages.
• UI: Update SQLite to 3.53.4
• Driver: Speed Limits: Improve shaping accuracy (#435).
• Driver: Various fixes (#756).
• Other fixes (#709, #720, #749).

 

[tnodir]

@Parkinsond Yes, false positive. Check with other AV, not MS Defender.

 

[Parkinsond]

@Parkinsond Yes, false positive. Check with other AV, not MS Defender.

Agree; on VT, only MD and Rising are flagging.

 

[n8chavez]

Is the driver signed yet. If not, pass. It's been 10x10^134 years since we were promised a signed driver. What's the point without that? Any security appllication that tells you that you have to lessen your security in order to use it is not something I want to use. Disable HVCI? Nope.

 

[tnodir]

since we were promised a signed driver.

I've tried at that time with no success. I don't want to deal with MS abomination again.

I’d rather spend the money on a Mac and get all the necessary certificates for $100 a year.

Since I’m building this firewall for myself, I’ll continue developing it for the time being.

Thanks for feedback!

 

[Parkinsond]

I've tried at that time with no success. I don't want to deal with MS abomination again.

I’d rather spend the money on a Mac and get all the necessary certificates for $100 a year.

Since I’m building this firewall for myself, I’ll continue developing it for the time being.

It is working flawlessly.

The lightest among all free firewalls, with granular control.

I have no virtualizaion in my old machine, so I do not have the option of core isolation in Windows security, which I consider a lower priority than a good firewall.

 

[tnodir]

Fort Firewall 3.20.1

• UI: Add Filter Simulator: Show the driver's decision on a connection (also from the Connections window).
• UI: Split the Statistics window into the Traffic and Connections windows.
• UI: Install/Remove the Service as Administrator from a non-admin UI (#472).
• UI: Password: Add "Unlock till" N minutes (#686).
• UI: Schedule: Set the Tasks' interval in minutes (#422).
• UI: TrayIcon: Check the Rules' actions by their enabled state (#678).
• UI: Backup: Restore the windows by the imported settings (#742).
• UI: Control: Add "rule on|off|report" and "rule set-text|get-text" commands (#727).
• UI: Control: Add "graph show|hide|switch" command (#743).
• UI: Control: "prog add": Open the Edit Program dialog without the Programs window (#680).
• Driver: Keep a wildcard program's paths on removal of a listed program (#696).