dns.. advfirewall firewall (I want to try security.)


  1. krdondon
    Posts : 42
    windows10
       New #1

    dns.. advfirewall firewall (I want to try security.)


    Cloudflare
    1.1.1.2
    1.0.0.2
    This is my default dns.
    (connected normally)

    netsh advfirewall firewall add rule name="allow security DNS" program=%SystemRoot%\system32\svchost.exe protocol=UDP dir=out remoteport=53 security=authenticate action=allow
    This is my attempt.

    I used the above command.
    But I can't access the website.

    What should I do?.
    I would like to try increasing dns security.
    But no matter which secure connection I choose... (security=?)
    [ security = { authenticate | authenc | authdynenc ] https://learn.microsoft.com/en-us/pr...ectedfrom=MSDN
    No connection.
    what is the problem What should I do?

    Please let me know if I need to install a certificate.

    Microsoft Windows [Version 10.0.19045.1826]
      My Computer
    Quote Quote

  3. Pluginz
    Posts : 679
    Windows 10
       New #2

    Hello bud

    I see your settings. You might need to add an additional TCP allocation to go along side the UDP, for handshake security.
    Ones hardware, the other software.
    Sometimes, just simply going into the Group Policy editor and Windows Defender Firewall with Advanced security can make your settings stick, and adding the permissions is easy. Plus inside there you'll find the IPsec security settings, where you can change the authentication modes. Standard authentication, Kerberos, NTLMv2, PAP or CHAP and root certification options.

    A deeper look in to what youre trying to do might give me some more suggestions.

    I'll be back
      My Computer
    Quote Quote

  4. krdondon
    Posts : 42
    windows10
    Thread Starter
       New #3

    Because I am not an expert.
    I want to follow the window setting part by looking at the image.
    Are there any sites or blogs I can refer to?
    thank you.
    :)

    And are there any such settings and commands to use?. Please let me know if there are any such things.
      My Computer
    Quote Quote

  6. Pluginz
    Posts : 679
    Windows 10
       New #4

    In the Group Policy Security options, for network security, you can create an audit log for your existing setup and see how the traffic is being dealt with.

    Its abit like a text messaging service. You can send someone a text and it only goes one way. Or you can set up the SMS confirmation to show whether someone has received that message or not, including you obviously.
    This means the text message info will actually bounce back and forth three times instead of once.

    Depends how you want it set up.

    A simple example on mobile phones and their APN's. Standard authentication on IPv4 will use PAP. But i change my APN so it uses CHAP.

    Have a read on PAP and CHAP authentication
    Last edited by Pluginz; 05 Oct 2022 at 17:49.
      My Computer
    Quote Quote

  7. krdondon
    Posts : 42
    windows10
    Thread Starter
       New #5

    I am using this command for the first time.
    The information you are guiding is too broad and difficult for me.
    or the command line. Is there an easy-to-use scrim or something like that?
    My goal is simply to get Cloudflare dns to my computer. This is to further strengthen security.
    (Simply enhance your computer's security. There is no other purpose.)

    I am not interested in notifications.
    I just want to enhance security.
    :) thank you.

    reg add HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters /v EnableAutoDoh /t REG_DWORD /d 2 /f
    reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v "TcpReceivePacketSize" /t REG_DWORD /d 0xFF00 /f
    This is the dns security enhancement I know.
      My Computer
    Quote Quote

  8. Pluginz
    Posts : 679
    Windows 10
       New #6

    Ahhh right ok, i gotchas now.

    Well thats easy to setup.

    Whats your Internet connection? LAN or Wireless ?

    CloudFlare through my testing, i found it isnt very secure. The only ones i found secure were Norton, OpenDNS and CleanBrowsing.

    Theres two easy ways to add these DNS addresses into Windows without complicated command prompts. The DNS's i use support both IPv4 and IPv6. Its a choice depending on what you use. I disable IPv6, so these options, i leave blank.

    Right click your network type in the taskbar. 'Open Network and Internet settings'. Go to 'Change Adapters'. Once you see your network adapter, then right click it, and goto properties.

    Next Window, look for the connection properties 'Internet Protocol Version 4 (TCP/IPv4)' and 'Internet Protocol Version 4 (TCP/IPv6)'. In here we can change the IPv4 primary and secondary dns addresses. This will bypass your ISP dns, whether its through a LAN or Wirelsss.

    If you were to open the command prompt, and type 'ipconfig /all'. This will tell us what your default dns addresses are set to. Once we change them to your own addresses, they'll change in ipconfig and a good test to see if theyve been set.

    This is how i set mine up

    https://www.tenforums.com/attachment...urity-ipv4.jpg

    Im using a static IP on my local. You can leave this blank if you want.

    The DNS i use OpenDNS. Best free secure dns ive ever used. If the browser info tells me its either not secure, or its not private, i simply do not go to that site anymore.
    Attached Thumbnails Attached Thumbnails dns.. advfirewall firewall (I want to try security.)-ipv4.jpg  
      My Computer
    Quote Quote

  9. krdondon
    Posts : 42
    windows10
    Thread Starter
       New #7

    thank you.
    These are the commands I mostly use.

    netsh interface ipv4 set dns "Ethernet" static 199.85.126.10
    netsh interface ipv4 add dns "Ethernet" 199.85.127.10 index=2
    (Norton ConnectSafe - Wikipedia)

    echo powershell
    Set-DNSClientServerAddress "Ethernet" -ServerAddresses ("199.85.126.10","199.85.127.10")

    Disable-NetAdapter -Name "Ethernet" -Confirm‎:$false
    Enable-NetAdapter -Name "Ethernet" -Confirm‎:$false

    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_implat
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_lldp
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_lltdio
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_pacer
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_rspndr
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_server
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_tcpip6
    Disable-NetAdapterBinding -Name "Ethernet" -ComponentID ms_msclient

    netsh int ipv6 isatap set state disabled
    netsh int teredo set state disabled

    netsh interface ipv6 6to4 set state state=disabled undoonstop=disabled
    reg add "HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" /v DisabledComponents /t REG_DWORD /d 0xFFFFFFFF /f
      My Computer
    Quote Quote

  10. Pluginz
    Posts : 679
    Windows 10
       New #8

    Thats some good detailed syntax youve remembered there sir.

    See how you get with the Norton. Im not sure if they prefer you to register or not. Ive used the Norton before and it just stopped working at random. I switched it back to OpenDNS and pages started to work again.

    I rate OpenDNS a little better then the Norton one
      My Computer
    Quote Quote

 

  Related Discussions
The Smart Firewall part of Norton Internet Security (Comcast) is turned off and the Settings window for the firewall is all greyed out. I can't even move the scroll bar. I uninstalled and reinstalled NIS. At first, the firewall was active, but...
Windows Security Firewall issue
in AntiVirus, Firewalls and System Security

I'm attempting to let Steam through my firewall (because It won't load, and assuming that is the issue, as I wasn't asked to let it through through a pop up) But, the settings are all greyed out, any fixes? 267532
Is this a Security/Firewall issue?
in AntiVirus, Firewalls and System Security

removed post ... due to it becoming irrelevant.
Internet security firewall issues
in AntiVirus, Firewalls and System Security

I've been using comodo for a year or so with no problems. A few builds ago, the firewall grayed out and stopped all access. I uninstalled and used defender; all good. I have tried reinstalling and it now says this program not compatible... Also,...
turn off windows firewall and kaspersky internet security
in AntiVirus, Firewalls and System Security

hi 68101 how turn on? i click in view firewall option and click turn on kaspersky but it isnt work
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 10:17.
Find Us




Windows 10 Forums