Sign in to follow this  
mundial

Which Windows programs to keep on allow list

Recommended Posts

Learning mode picked up the following:

lsass.exe, services.exe, svchost.exe and wininit.exe. I know I need to allow svchost.exe. What about the rest? Can I block them or will that stop my Internet access at some point, even if not immediately?

Also why do they need incoming connections as picked up by learning mode? Is there any way to stop incoming connections (like default deny all incoming connections) other than select Protocol: BOTH, Deny: INBOUND, Add ports: 0-65535 for each program?

Share this post


Link to post
Share on other sites

Instead of selecting a specific program, you can create a rule that blocks inbound for "All Programs" if that's what you are looking to do. Be aware though that if you do this, all incoming connections will be blocked silently and you will have to check the Firewall log window if you want to see if anything has been blocked. Doing so may also result in programs (or possibly your internet connection) not working correctly if they require an inbound connection.

The same applies for the various processes you mention. You may be able to block them from internet access without problems, or you may not. What will work okay for one person's setup may not be a good choice for someone else's. Most likely you'd have to experiment and see what works for you.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.