Randy_Bell
Global Moderator
    

TrojanHunter is the Best!


Gender: 
Posts: 2883
|
 |
Re: Built-in Windows firewall question
« Reply #1 on: Jan 20th, 2006, 4:56am » |
Quote Modify
|
on Jan 20th, 2006, 3:48am, devnull wrote:| This application filter must exists, i'm pretty sure: as sometimes windows firewall (WF) ask me if i want to continue blocking of a specific file or service. How windows figures out what files to block? |
| The Windows firewall only does inbound packet filtering, no outbound. It asks you about any file or service which tries to establish an inbound connection to your PC from a remote source. In ZA terminology, it asks you about any file or service that is trying to have "server rights" or act like a server. This is appropriate because allowing unsolicited inbound connection {"acting like a server"} is what pokes a hole in the firewall and will register as open port(s) in a portscan. Hope that helps ..
|