Can't connect to Internet without allowing svchost

[wealstarr]

Hello,

The initial setup already whitelists the DHCP so connection could be nade to router without allowing anything else. In my case however, I get a prompt that svchost.exe is requesting access to internet, when I deny that request, system gets disconnects from router making the machine go offline. I have tried many combinations / restore / fresh settings to get around this but it won't work. What am I doing wrong ? DHCP is already whitelisted, I want to keep svchost blocked becauae many other components use this service as a wrapper to connect to Internte which I dont want to allow.

Another question, in Audit tab, there are 100's of pre defined rules in Firewall most of which are already whitelisted. What to do here ? I just want my whitelisted apps to connect and disable everything else.

Any help will be greatly appreciated.

Kind regards

Minimal Firewall version : 2.6.3
OS: Windows 11 24H2

[deminimis]

Block rules supersede any allow rules, so if you block all of svchost (C:\Windows\System32\svchost.exe), it should block dhcp and any other necessary Windows processes. Windows was not designed for privacy or to allow privacy (hence why if you use scripts like privacy.sexy or the like, your computer will necessarily run into problems eventually).

Audit just lists all the rules that were created outside the app, such as pre-existing rules, or rules automatically added by programs you install, with or without your knowledge. You can look at them at allow/ignore them, delete them, etc. The quarantine button at the top (experimental), block them all by default until you whitelist.

[wealstarr]

Block rules supersede any allow rules, so if you block all of svchost (C:\Windows\System32\svchost.exe), it should block dhcp and any other necessary Windows processes. Windows was not designed for privacy or to allow privacy (hence why if you use scripts like privacy.sexy or the like, your computer will necessarily run into problems eventually).

Audit just lists all the rules that were created outside the app, such as pre-existing rules, or rules automatically added by programs you install, with or without your knowledge. You can look at them at allow/ignore them, delete them, etc. The quarantine button at the top (experimental), block them all by default until you whitelist.

Thank you for the response. I will sure be using that quarantine button as there are tons of apps from UWP subset allowing themselves.

As for DHCP, I don't understand what's the point of having a whitelisted rule out of the box when system can't stay connected without allowing svchost to pass through ? I'm not sure I quite follow you on this one.

But more important than explianations is the workaround. Is there any way to get around this issue and selectively allow DHCP to pass through while blocking the svchost stack ?

Your project is kick ass. I found it accidently, and I instantly grabbed it without a second thought. I always wanted what you built, a dynamic front end for build in Firewall that prompts when something requests the network access.

Thank you for making this program, and thank you for the kind support. Your contribution and your help is highly appreciated.

PS. The remark you made about Windows, is the reason what makes your project essential in modern day Windows enviornments. I'm so glad I found it.

Kind regards

[deminimis]

Block rules supersede any allow rules, so if you block all of svchost (C:\Windows\System32\svchost.exe), it should block dhcp and any other necessary Windows processes. Windows was not designed for privacy or to allow privacy (hence why if you use scripts like privacy.sexy or the like, your computer will necessarily run into problems eventually).
Audit just lists all the rules that were created outside the app, such as pre-existing rules, or rules automatically added by programs you install, with or without your knowledge. You can look at them at allow/ignore them, delete them, etc. The quarantine button at the top (experimental), block them all by default until you whitelist.

Thank you for the response. I will sure be using that quarantine button as there are tons of apps from UWP subset allowing themselves.

As for DHCP, I don't understand what's the point of having a whitelisted rule out of the box when system can't stay connected without allowing svchost to pass through ? I'm not sure I quite follow you on this one.

But more important than explianations is the workaround. Is there any way to get around this issue and selectively allow DHCP to pass through while blocking the svchost stack ?

Your project is kick ass. I found it accidently, and I instantly grabbed it without a second thought. I always wanted what you built, a dynamic front end for build in Firewall that prompts when something requests the network access.

Thank you for making this program, and thank you for the kind support. Your contribution and your help is highly appreciated.

PS. The remark you made about Windows, is the reason what makes your project essential in modern day Windows enviornments. I'm so glad I found it.

Kind regards

You could try to block only parts of svchost.

For example, create a rule:
%SystemRoot%\System32\svchost.exe
Block
TCP
All Ports

and

%SystemRoot%\System32\svchost.exe
Block
UDP
Ports: 0-52, 54-66, 69-122, 124-65535

I will try to create better service-aware rules in the meantime to see if I can get this to work.

[wealstarr]

@deminimis

Thank you but I will rather let you handle this stuff than trying and breaking something in the process. Will wait for the new version with a fix. Hoping you find a way to do this.

Kind regards