Serious Discussion Minimal Firewall

@deminimis I'm running into an issue, and maybe what I'm doing is unique?

1. I'm using official opera portable
2. I've saved it within a veracyrypt container
3. I used the allow/block all programs in a folder function to block all exes where the opera portable folder is and block inbound/outbound connections. I always mount the veracrypt container to the same drive every time so the path is consistent.

Doing the above works, opera can't access any websites so rules are working as intended. When I close the container/reopen it, it works perfectly fine.

However when I restart my computer, open the container with the same drive/filepath, and open Opera it can access websites. I have to delete the rules i made, remake them exactly, same file path, block inbound/outbound, block exe etc. and it'll work but only until I restart my PC. and then I have to remake the rule.

I was also running into this issue with a firefox portable setup in the same way.

Other programs I run as portable within the container the rules will work 100% of the time.

It seems to be unique to browsers at the moment.
 
andytan said:
@deminimis I'm running into an issue, and maybe what I'm doing is unique?

1. I'm using official opera portable
2. I've saved it within a veracyrypt container
3. I used the allow/block all programs in a folder function to block all exes where the opera portable folder is and block inbound/outbound connections. I always mount the veracrypt container to the same drive every time so the path is consistent.

Doing the above works, opera can't access any websites so rules are working as intended. When I close the container/reopen it, it works perfectly fine.

However when I restart my computer, open the container with the same drive/filepath, and open Opera it can access websites. I have to delete the rules i made, remake them exactly, same file path, block inbound/outbound, block exe etc. and it'll work but only until I restart my PC. and then I have to remake the rule.

I was also running into this issue with a firefox portable setup in the same way.

Other programs I run as portable within the container the rules will work 100% of the time.

It seems to be unique to browsers at the moment.
Click to expand...
I haven't tried using with Veracrypt, but it sounds like an orphaned rule. Firewall services start up first, and see that path doesn't even exist, so disables it for the session.

I can probably get around it by re-enabling all rules managed by Minimal Firewall when it starts. If you open an issue on github it will be easier. It may be a little bit of time though, I'm busy with a paid project at the moment.
 
  • Like
Reactions: andytan
Update: v 2.6.5

Backend​

  • Refactored code for stability
  • Windows Event auditing turned off when unlocked
  • Culture invariant to try to support non-English systems better

Bugs​

  • Fixed column sorting
  • Fixed group tab toggle

UI​

  • Removed "allow" prefix before simple rule names.
Click to expand...
 
  • Like
  • +Reputation
Reactions: deminimis, simmerskool and piquiteco
LinuxFan58 said:
Are you using it? If so what do think about it?
Click to expand...
I use it off and on but not ATM. I had problems with it in the past and I may try it again soon. Maybe he's worked out some of the bugs. But I love the look of the UI and the whole concept of a simple front end for WF. No hooks, services, etc.
 
  • +Reputation
  • Like
Reactions: simmerskool and piquiteco
2.6.8 released few weeks ago
  • Reduced noise filtering to make sure most apps would prompt you to create a firewall rule.
Click to expand...
github.com

Releases · deminimis/minimalfirewall

Minimal Firewall is a portable Windows firewall frontend that alerts users to internet connections without requiring custom kernel modifications or disabling core isolation, striking a balance betw...
github.com github.com
 
  • Like
  • +Reputation
Reactions: lokamoka820, deminimis, pytroman86 and 2 others
Minimal Firewall 2.7.0

UI​

  • Added auto-theme to follow whatever theme you have on in Windows.
  • Slightly updated light theme colors.
  • Adjusted rule creator boxes
  • Added status bar displaying properties in dashboard, including publisher

Bugs​

  • Removed implicit 255.255.255.255 from advanced rule creator
  • Fixed right click in dashboard, so when you right click a row not selected, it selects that row first.

Backend​

  • general code improvement (memory/race condition fixes; code consolidation w/ helpers)
  • Now captures the parent process of pending connections
  • Upgraded to net 10.

Features​

  • Dashboard - added check on virus, checksum, and new properties in status bar
Click to expand...
github.com

Release v2.7.0 · deminimis/minimalfirewall

UI Added auto-theme to follow whatever theme you have on in Windows. Slightly updated light theme colors. Adjusted rule creator boxes Added status bar displaying properties in dashboard, including...
github.com github.com
 
  • Like
  • +Reputation
Reactions: deminimis, blueblackwow65, Halp2001 and 3 others
v2.7.1

Bugs​

  • Fixed audit tab not showing up
  • Fixed WSL connection
  • Fixed edit rule in rule tab
  • Signature fix

Backend​

  • Ensured pending connections stay until interacted with in dashboard

UI​

  • Changed appdata button to localappdata
Click to expand...
github.com

Release v2.7.1 · deminimis/minimalfirewall

Bugs Fixed audit tab not showing up Fixed WSL connection Fixed edit rule in rule tab Signature fix Backend Ensured pending connections stay until interacted with in dashboard UI Changed appdat...
github.com github.com
 
  • Like
  • +Reputation
Reactions: deminimis, blueblackwow65, oldschool and 2 others
v2.7.3

Bugs​

  • Fixed theme persistence.

Backend​

  • Integrated WinVerifyTrust to validate catalog-signed Windows binaries; blocks spoofed metadata in unsigned files.

Features​

  • Split the toggle into User Whitelisted Publishers and Windows Trusted (OS-CA-signed) for auto-allow feature.
  • Trusted Certificates viewer for System/User stores.
Click to expand...
github.com

Release v2.7.3 · deminimis/minimalfirewall

Bugs Fixed theme persistence. Backend Integrated WinVerifyTrust to validate catalog-signed Windows binaries; blocks spoofed metadata in unsigned files. Features Split the toggle into User Whit...
github.com github.com
 
  • Like
  • +Reputation
Reactions: deminimis, oldschool, Halp2001 and 1 other person
v2.7.4
  • Add .editorconfig and .gitattributes by @mirbyte in #122
  • Update README build instructions by @mirbyte in #124
  • Verify WFP audit policy on startup when lockdown is persisted by @mirbyte in #125
  • Possible fix for #117: allow Dnscache TCP (DoH / DoT / TCP-53) in Lockdown Mode by @mirbyte in #126
  • Gate signature trust on Authenticode digest verification by @mirbyte in #127
  • Replace fixed delays with idle-wait in rule queue by @mirbyte in #128
  • Fix #112: Harden shutdown paths to prevent ObjectDisposedException and UI deadlock by @mirbyte in #129
  • Add Date Added column to Rules tab by @mirbyte in #131
Click to expand...
github.com

Release v2.7.4 · deminimis/minimalfirewall

What's Changed Add .editorconfig and .gitattributes by @mirbyte in #122 Update README build instructions by @mirbyte in #124 Verify WFP audit policy on startup when lockdown is persisted by @mirby...
github.com github.com
 
  • Like
  • +Reputation
Reactions: oldschool, deminimis, blueblackwow65 and 2 others
Hi @deminimis - Just installed Minimal Firewall and I’m really liking it so far. The clean layout, simple design, and sensible feature set make it feel like a tool that’ll slot perfectly into my security setup.

One tiny cosmetic request: dark mode is a bit tough for me to see clearly. Any chance of adding a system‑theme or light‑mode option?
 
  • Like
Reactions: oldschool
Higgsie said:
Hi @deminimis - Just installed Minimal Firewall and I’m really liking it so far. The clean layout, simple design, and sensible feature set make it feel like a tool that’ll slot perfectly into my security setup.

One tiny cosmetic request: dark mode is a bit tough for me to see clearly. Any chance of adding a system‑theme or light‑mode option?
Click to expand...
My fault there is a visual theme switch included, I should have RTFM "read the f*** manual" so all good :)
 
  • HaHa
  • Like
Reactions: oldschool and deminimis

You may also like...