Battle TinyWall Vs SimpleWall

[DDE_Server]

hello everybody
I want to discuss the difference between Tiny wall and simple wall from features and protection restrictions mechanisms
I think Tiny wall is for configuring advanced windows firewall rules however simple wall is for managing WFP (windows filtering platform)
Which is better for protection? less in conflicts after configuration ?? Has many effects as a defense mechanism?
correct me if any of my understanding is wrong

 

[DDE_Server]

This is where having notification feature helps for me. I immediately know which exe is asking for internet connection. Anyway, like we said, different people like different approaches.

that really take me a lot if time may i export tinywall rules and try simple wall

 

[SeriousHoax]

that really take me a lot if time may i export tinywall rules and try simple wall

Only first time after installing. I using the portable version so everything is set for even after new Windows installation.
I don't know if TinyWall rules can be imported in SimpleWall!

 

[DDE_Server]

Only first time after installing. I using the portable version so everything is set for even after new Windows installation.
I don't know if TinyWall rules can be imported in SimpleWall!

Tiny wall export extension is specific for tiny wall (.tws) which is different than windows firewall rules export (.WFW). so i donot know if it could imported in simplewall or not. which extension the exported rules from simple wall has ?
may you try to rename the extension and import. but i think the export from Tinywall has also Tinywall settings also (not firewall rules only) so it might not be compatible with simple wall software

 

[oldschool]

yes Learning mode is great method to take off a lot of hassle to whitelist some programs if you couldn't get to the exact service or exe which need internet access to make your program work as intended file to make your program work

@ultim has written this about learning mode:

- From the FAQ:
"Why doesn't auto-learn learn the rules I need?
To prevent unintentionally learning rules that could make almost every program access the internet, TinyWall's auto-learn function has been restricted from learning rules for system or svchost processes. Furthermore, due to technical limitations in Windows, auto-learn cannot recognize services. As a result, TinyWall's auto-learn mode is mostly only suited to learning traditional desktop applications installed by the user themself."

 

[SeriousHoax]

Tiny wall export extension is specific for tiny wall (.tws) which is different than windows firewall rules export (.WFW). so i donot know if it could imported in simplewall or not. which extension the exported rules from simple wall has ?
may you try to rename the extension and import. but i think the export from Tinywall has also Tinywall settings also (not firewall rules only) so it might not be compatible with simple wall software

SimpleWall uses xml format. Yes right. Those won't work as they are two different programs.

 

[DDE_Server]

@ultim has written this about learning mode:

- From the FAQ:
"Why doesn't auto-learn learn the rules I need?
To prevent unintentionally learning rules that could make almost every program access the internet, TinyWall's auto-learn function has been restricted from learning rules for system or svchost processes. Furthermore, due to technical limitations in Windows, auto-learn cannot recognize services. As a result, TinyWall's auto-learn mode is mostly only suited to learning traditional desktop applications installed by the user themself."

yes i was talking about desktop application not system process or services. instead of tracing certain program process to whitelist it in Tinywall you could use autolearn. for example i faced this problem with pycharm before although i whitelisted all executable files in its installation path and all running process i couldn't update or install plugins from its market until i used auto learn mode.may be the program was utilizing some system process which enabled when i used auto learn mode actually i don't know but the problem is resolved

 

[DDE_Server]

SimpleWall uses xml format. Yes right. Those won't work as they are two different programs.

may work only if the have the same common format (export format) and only rules are exported (not setting also)

 

[ForgottenSeer 85179]

Guys don't forget that a portable program isn't protected by UAC by default.
And simplewall isn't digital signed with a certificate like TinyWall or MalwareBytes Windows Firewall Control.

 

[SeriousHoax]

Guys don't forget that a portable program isn't protected by UAC by default.
And simplewall isn't digital signed with a certificate like TinyWall or MalwareBytes Windows Firewall Control.

These doesn't matter if one trusts the program. Just cause TinyWall and WFC are digitally signed and triggers UAC doesn't mean they are better. Nowadays even many malwares comes digitally signed. SimpleWall is open source so one can check the codes to see if it's doing anything suspicious underneath while other two are closed sourced no way to check that but it doesn't mean that SimpleWall is better. All three are very good products, trusted by the community with no bad records so far.

 

[DDE_Server]

These doesn't matter if one trusts the program. Just cause TinyWall and WFC are digitally signed and triggers UAC doesn't mean they are better. Nowadays even many malwares comes digitally signed. SimpleWall is open source so one can check the codes to see if it's doing anything suspicious underneath while other two are closed sourced no way to check that but it doesn't mean that SimpleWall is better. All three are very good products, trusted by the community with no bad records so far.

But it is better to verify the program at least before using it.yes it is trusted you should at least verify the the binaries aren't modified "remember the C cleaner installer modification accident before in the official website
also this may problem with any AV software utilizing trusted application control such as kaspersky. need an exception

 

[SeriousHoax]

But it is better to verify the program at least before using it.yes it is trusted you should at least verify the the binaries aren't modified "remember the C cleaner installer modification accident before in the official website
also this may problem with any AV software utilizing trusted application control such as kaspersky. need an exception

Yeah I agree. Verifying the hash is useful in this case.

 

[DDE_Server]

@SeriousHoax i am trying simple wall right now
for blocked process i chose open containing folder and it doesn't open it could you know the reason ?

also additional question is there any of blocked exe could break something and if that how do you know i want to know if there is any guide to know if this process is optional or mandatory to allow ??
i read that hxtsr.exe is important process related to office (outlook) and should be allowed unless it is malicious what do you think ?

 

[ForgottenSeer 85179]

@SeriousHoax i am trying simple wall right now
for blocked process i chose open containing folder and it doesn't open it could you know the reason ?
View attachment 238189
also additional question is there any of blocked exe could break something and if that how do you know i want to know if there is any guide to know if this process is optional or mandatory to allow ??
i read that hxtsr.exe is important process related to office (outlook) and should be allowed unless it is malicious what do you think ?

If you don't know what you do, you better don't block internal system processes

It will break important stuff!

 

[SeriousHoax]

for blocked process i chose open containing folder and it doesn't open it could you know the reason ?

Maybe an unexpected bug that I haven't faced. Open containing folder works for me.
I see that you even blocked svchost and System/ntoskrnl. No no don't ever do that. svchost, system are the main system process and allowing it internet connection is a must.
If you want then there's one thing you can do to harden it, which is what I did and that is, create an allow outbound rule for TCP protocol for remote port 80, 443 only and set svchost.exe to use this rule. I can assure you that it never breaks anything because legit processes only make connection via svchost in the ports.

You may also wanna enable taskhostw.exe because some scheduled tasks requires it.
I don't know about hxtsr.exe because I don't use any MS Office/Outlook. So, if it is necessary for this to work then you should enable it.

also additional question is there any of blocked exe could break something and if that how do you know

I think the logging option isn't enabled by default. You should enable it. By default it will open it in Notepad but you can customize it open it another app eg: I prefer Notepad++ so that's what I did. Check log for checking all blocked connections.

Also enable resolve network address and check apps for digital signatures.

 

[DDE_Server]

If you don't know what you do, you better don't block internal system processes

It will break important stuff!

Removed it and reverted back to Tinywall again
it blocked my network connections
i will try to learn more about it then try installing it again
also couldnot tun it using SUA and it didnot start after window boot.i donot know why ?

 

[DDE_Server]

it written during installation it should run as administrator i did and it is installed
however it didnot run after reboot also it seems it couldnot run after reboot because of hard configurator is enabled

 

[ForgottenSeer 85179]

Why not just stay with TinyWall ?

 

[SeriousHoax]

Removed it and reverted back to Tinywall again
it blocked my network connections
i will try to learn more about it then try installing it again
also couldnot tun it using SUA and it didnot start after window boot.i donot know why ?

Are you talking about TinyWall here?

 

[DDE_Server]

Are you talking about TinyWall here?

No simlple wall
i uninstalled it restore windows firewall to default and installed Tinywall again

 

[SeriousHoax]

No simlple wall
i uninstalled it restore windows firewall to default and installed Tinywall again

Ow ok. You probably didn't check Settings. Startup, UAC bypass, start minimized every options are there.