What does Windows Firewall do if I don't add a specific firewall rule?

1

1

Suppose I have a program which needs to connect to the Internet in order to work. Let's also say that I only want this program to communicate on private networks, so I add a firewall rule allowing it to communicate on private connections.

If I don't want it to work on public connections, should I explicitly add a new blocking firewall rule or would Windows Firewall automatically block the traffic on public networks for this program (i.e. following a whitelist approach, where everything is blocked by default)?

user1301428

Posted 2013-04-09T08:43:13.303

Reputation: 2 985

Depends on the specific program. Most programs don't need a firewall rule to work. – Ramhound – 2013-04-09T11:07:46.117

@Ramhound I know, I was referring to programs which need a firewall rule to work – user1301428 – 2013-04-09T11:25:56.737

Are you talking about outbound connections, where the program connects to a server on the internet, or inbound connections, where a machine on the internet connects to the program? – Harry Johnston – 2013-04-12T05:00:02.267

@HarryJohnston both :) – user1301428 – 2013-04-14T12:21:37.247

By default, outbound connections are a blacklist, and inbound connections are a whitelist. But that's configurable. – Harry Johnston – 2013-04-14T22:53:44.063

@HarryJohnston thanks! Where can I configure the general behavior? – user1301428 – 2013-04-18T23:03:23.377

Answers

1

By default, outbound connections are a blacklist, and inbound connections are a whitelist.

However, you can configure this behaviour from the Windows Firewall with Advanced Security control panel (go to Windows Firewall and click on Advanced Settings).

To do this, right-click on the topmost node in the left-hand pane ("Windows Firewall with Advanced Security") and select Properties.

Harry Johnston

Posted 2013-04-09T08:43:13.303

Reputation: 5 054