How do I set the firewall like it's brand new??

  1. jumper77's Avatar
    Posts : 7
    Windows 10
       #1

    RESOLVED: How do I set the firewall like it's brand new??


    I'm new to Netsh and need some help with something. What I want to do is set the firewall to a state where nothing is allowed inbound or outbound. Once I have done that, I want to add programs to the whitelist one at a time. What I want is to be able to start with a clean slate.

    I thought resetting the firewall would do that, but it doesn't (at least not for me).

    I have the command to block all inbound and outbound traffic...
    Code:
    netsh advfirewall set allprofiles firewallpolicy blockinbound,blockoutbound

    Hope this question is clear.... if not, feel free to ask anything
    Thanks in advance for any help!
    Last edited by jumper77; 30 Jan 2019 at 15:24.
      My Computer

  2. TairikuOkami's Avatar
    Posts : 4,778
    Windows Home Dev 21xxx x64
       #2

    Code:
    netsh advfirewall firewall delete rule name=all
    You will most likely also want to allow svchost.exe for DNS, updating certificates, windows updates, etc.
    Code:
    netsh advfirewall firewall add rule name="Svchost DNS" dir=out action=allow protocol=UDP remoteport=53 program="%WINDIR%\System32\svchost.exe"
    netsh advfirewall firewall add rule name="Svchost TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="%WINDIR%\System32\svchost.exe"
      My Computer

  3. Samuria's Avatar
    Posts : 6,119
    windows 10
       #3

    To reset the Windows Firewall to its default settings, do the following:

    Open Control Panel.
    Click on System and Security.
    Click on Windows Firewall.
    On the left pane, click the Restore defaults link.
    Click the Restore defaults button.
    Click Yes to confirm.
      My Computer

  4. dalchina's Avatar
    Posts : 30,542
    Win 10 Pro (1903)
       #4

    Hi, just wondering how you are intending to use this. There is quite a bit of background activity by Windows, updating apps, app content, 3rd party programs validating registration etc etc.

    If you are aiming to whitelist only those things you know, that would exclude a lot of others.

    Put another way, how would you know what you're blocking?

    I remember that Zonealarm firewall (many years back) could prompt the user to allow or deny access. That is, the user could have control, but be prompted. That might be still the case, and would address the issue of determining what should and shouldn't be allowed.

    Manage application interactions

    The application control feature literally keeps an eye on all running processes and their behavior, and if the learning mode is selected from the setup process you are prompted whenever applications interact in order to allow or deny their activity if you consider it suspicious.

    Easily set up the security level

    Settings can be fully customized, with sliders to adjust the level of security the application should apply. Furthermore, all programs can be viewed, as well as their status and trust level, and you can fully manage them and add your own.
    Download ZoneAlarm Free Firewall 15.0.159.17147
      My Computers

  5. jumper77's Avatar
    Posts : 7
    Windows 10
    Thread Starter
       #5

    How do I set the firewall like it's brand new??


    Thank you TairikuOkami. That worked fine. And thanks to everyone else too! And thank you also dalchina. I know that I need to add certain things back in after the reset. I need to do my homework on that and try to find all of the programs that should be allowed from the beginning and add those rules back in. And I appreciate those that mentioned some of the programs that should bypass the firewall by default.

    Hope everyone has a great day/night!
      My Computer

  6. TairikuOkami's Avatar
    Posts : 4,778
    Windows Home Dev 21xxx x64
       #6

    When I create rules for WF, I temporarily allow all outbound, then use LiveTcpUdpWatch to watch the traffic and create rules accordingly. I use IPNetInfo to get IP ranges (for CDN). My rules for comparison:
    Attached Thumbnails Attached Thumbnails How do I set the firewall like it's brand new??-capture_01302019_222005.jpg  
      My Computer

  7. jumper77's Avatar
    Posts : 7
    Windows 10
    Thread Starter
       #7

    TairikuOkami said:
    When I create rules for WF, I temporarily allow all outbound, then use LiveTcpUdpWatch to watch the traffic and create rules accordingly. I use IPNetInfo to get IP ranges (for CDN). My rules for comparison:
    Thank you for the link to the tools. They will come in handy! I have been a fan of NirSoft and have used NirCmd for years.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:44.
Find Us




Windows 10 Forums