Windows 7 Understanding Service Setting Customization for Windows Firewall Rules

Neemobeer

Windows Forum Team

Staff member

Joined

Jul 4, 2015

Messages

8,995

• Jun 11, 2017

#2

Internet Explorer isn't a service.

 

Upvote 0 Downvote

M

Masao

New Member

Joined

May 31, 2017

Messages

13

• Jun 11, 2017

Thread Author #3

Agreed. Is the setting for "all programs and services" just a self-reference. I don't understand why I can't select all services or a single service.

 

Last edited: Jun 11, 2017

Upvote 0 Downvote

M

Masao

New Member

Joined

May 31, 2017

Messages

13

• Jun 13, 2017

Thread Author #4

From the audit log, windows filtering blocks the process (PID) for the .exe selected for the firewall rule without all programs and services selected in service customization.

I created another rule for the executable that blocked all services. So between the two rules my service customization becomes "allow all programs and no services.

Does that mean that any program can call the executable for communication through the firewall but no services can? If so, is there anyway to restrict that further to allow no other executables but the one referenced?

 

Last edited: Jun 13, 2017

Upvote 0 Downvote

Neemobeer

Windows Forum Team

Staff member

Joined

Jul 4, 2015

Messages

8,995

• Jun 13, 2017

#5

Not really sure I understand what you're trying to accomplish. There is very little distinction between a program and a service. They are both technically programs. Services simply run outside the interactive session and can't directly interact with the interactive session and can also run without the interactive session in use (someone logged in). Inter process communication can't be blocked by a firewall since it's not network traffic. There is nothing from preventing say a malicious service from running a local application that in turns communicates out if that program is allowed. As far as the firewall is concerned in your scenario "allow all programs" is satisfied.

 

Upvote 1 Downvote

Solution