📄 fwpresets.ini
字号:
;Concise format description:
;
;[App preset name] [non-empty string] preset name (if 'PacketRule' specified, packet rule will be created)
;App=app1.exe, app2.exe [set of non-empty strings] list of executable files. comma-separated
;CommandLine=app args [string] arguments with witch process has been started
;UseCommandLine=1 [1,0] use / not use command line parameter. 0 by default
;Name=some App activity [non-empty string] rule name (must be the first line of each rule description)
;Enable=1 [1,0] enable / disable rule. 1 by default
;Allow=1 [1,0] allow / deny network activity. 1 by default
;Protocol=TCP [TCP,UDP] protocol. TCP by default
;Direction=OutboundStream [Inbound,Outbound,InboundOutbound,InboundStream,OutboundStream] direction. InboundOutbound by default
;RemotePort=21, 22, 25-28 [set of port numbers] remote ports (only for TCP and UDP protocols may be specified). comma-separated
;LocalPort=21, 22, 25-27 [set of port numbers] local ports (only for TCP and UDP protocols may be specified). comma-separated
;RemoteAddress=1.2.3.4, 4.3.2.1 [set of ip-addresses] remote addresses. comma-separated
;LocalAddress=1.2.3.4, 4.3.2.1 [set of ip-addresses] remote addresses. comma-separated. for packet rules only.
;Log=1 [1,0] log then applied. 0 by default
;Warning=1 [1,0] notify (show ballon) then applied. 0 by default
[Allow All]
Name=Allow Any TCP Activity
Protocol=TCP
Name=Allow Any UDP Activity
Protocol=UDP
[Block All]
Name=Block Any TCP Activity
Allow=0
Protocol=TCP
Name=Block Any UDP Activity
Allow=0
Protocol=UDP
;General
[Mail Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Default Mail Client
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Read News By Default Mail Client
Protocol=TCP
RemotePort=119
Direction=OutboundStream
Name=Receive Mail By Default Mail Client
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=Default Mail Client IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
[Browser]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Browser HTTP Activity
Protocol=TCP
RemotePort=80-83
Direction=OutboundStream
Name=Browser HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream
Name=Browser SOCKS Activity
Protocol=TCP
RemotePort=1080
Direction=OutboundStream
Name=Browser PROXY Activity
Protocol=TCP
RemotePort=3128, 8080, 8088
Direction=OutboundStream
Name=Browser FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream
Name=Browser FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream
[Download Manager]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Download Manager HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
Name=Download Manager FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream
Name=Download Manager FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream
[FTP Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=FTP Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream
Name=FTP DATA Activity
Protocol=TCP
RemotePort=20
Direction=InboundStream
[Telnet Client]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Telnet Activity
Protocol=TCP
RemotePort=23
Direction=OutboundStream
Name=Secure Telnet Activity
Protocol=TCP
RemotePort=22
Direction=OutboundStream
[Time Synchronizer]
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=123
Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=37
Name=Time Synchronizer Activity
Protocol=TCP
RemotePort=37
Direction=OutboundStream
Name=Time Synchronizer Activity
Protocol=TCP
RemotePort=13
Direction=OutboundStream
;Windows services
[Microsoft ICS Manager]
App=icsmgr.exe
Name=Microsoft ICS Manager DNS Resolving
Protocol=UDP
RemotePort=53
Direction=OutboundStream
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
Name=Microsoft ICS Manager Activity
Protocol=UDP
RemotePort=67
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
[Microsoft ActiveSync]
App=wcescomm.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Microsoft ActiveSync
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Receive Mail By Microsoft ActiveSync
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=Microsoft ActiveSync IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=Microsoft ActiveSync HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Generic Host Process]
App=svchost.exe
Name=Localhost UDP Activity
Protocol=UDP
RemoteAddress=127.0.0.1
RemotePort=1024-65535
Direction=OutboundStream
Name=Svchost DNS Service Over UDP
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Svchost DNS Service Over TCP
Protocol=TCP
RemotePort=53
Direction=OutboundStream
Name=Svchost DCOM Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream
Name=DHCP Service
Protocol=UDP
LocalPort=68
RemotePort=67
Direction=InboundOutbound
Name=HTTP Activity
Protocol=TCP
RemotePort=80
Direction=OutboundStream
Name=HTTPS Activity
Protocol=TCP
RemotePort=443
Direction=OutboundStream
Name=Time Synchronizer Activity
Protocol=UDP
RemotePort=123
Direction=OutboundStream
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1024-65535
RemotePort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0, 239.255.255.250/255.255.255.255
Direction=InboundOutbound
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
Direction=InboundStream
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=TCP
RemotePort=5000
Direction=OutboundStream
Name=Microsoft Remote Desktop TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream
Name=Generic Host Process LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream
Name="Link-Local Multicast Name Resolution" Inbound UDP Activity
Protocol=UDP
LocalPort=5355
Direction=InboundStream
Name="Link-Local Multicast Name Resolution" Outbound UDP Activity
Protocol=UDP
RemotePort=5355
Direction=InboundOutbound
Name="Web Services Discovery" Inbound UDP Activity
Protocol=UDP
LocalPort=3702
Direction=InboundStream
Name="Web Services Discovery" Outbound UDP Activity
Protocol=UDP
RemotePort=3702
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0, 239.255.255.250/255.255.255.255
Direction=InboundOutbound
Name="Web Services Discovery" Inbound TCP Activity
Protocol=TCP
LocalPort=2869, 5357, 5358
Direction=InboundStream
Name="Web Services Discovery" Outbound TCP Activity
Protocol=TCP
RemotePort=2869, 5357, 5358
Direction=OutboundStream
[Microsoft ALG Service]
App=alg.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Allow ALG Redirect
Protocol=TCP
Direction=InboundStream
Name=Microsoft Application Layer Gateway Service Activity
Protocol=TCP
RemotePort=21
Direction=OutboundStream
[Microsoft Application Error Reporting]
App=dw.exe, dwwin.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Application Error Reporting HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Microsoft Registration Wizard]
App=regwiz.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Registration Wizard HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Microsoft RDP CIip Monitor]
App=rdpclip.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft RDP CIip Monitor TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream
Name=Microsoft RDP CIip Monitor UDP Activity
Protocol=UDP
RemotePort=3389
[Microsoft Remote Desktop]
App=mstsc.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Remote Desktop TCP Activity
Protocol=TCP
RemotePort=3389
Direction=OutboundStream
Name=Microsoft Remote Desktop UDP Activity
Protocol=UDP
RemotePort=3389
[Microsoft Remote Desktop Help Session Manager]
App=sessmgr.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Remote Desktop Help Session Manager Activity
Protocol=UDP
RemotePort=1900, 2234
[Microsoft Synchronization Manager]
App=mobsync.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Synchronization Manager HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Microsoft Windows AutoUpdate]
App=wuauclt.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Microsoft Windows AutoUpdate HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Run a DLL as an App]
App=rundll32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1024-65535
RemotePort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0, 239.255.255.250/255.255.255.255
Direction=InboundOutbound
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=UDP
LocalPort=1900
RemoteAddress=10.0.0.0/255.0.0.0, 169.254.0.0/255.255.0.0, 172.16.0.0/255.240.0.0, 192.168.0.0/255.255.0.0
Direction=InboundStream
Name="SSDP Discovery Service" And "UPnP device Host" Activity
Protocol=TCP
RemotePort=5000
Direction=OutboundStream
Name=ICS TCP Activity
Protocol=TCP
LocalPort=1000-4000
Direction=OutboundStream
Name=ICS UDP Activity
Protocol=UDP
LocalPort=1000-4000
[SSDP Service]
App=ssdpsrv.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=ICS TCP Activity
Protocol=TCP
LocalPort=1000-4000
Direction=OutboundStream
Name=ICS UDP Activity
Protocol=UDP
LocalPort=1000-4000
[Spooler SubSystem App]
App=spoolsv.exe
Name=DNS Service
Protocol=UDP
Direction=OutboundStream
RemotePort=53
Name=Spooler SubSystem DCOM Activity
Protocol=TCP
RemotePort=135, 1025-1040
Direction=OutboundStream
;Mail
[FoxMail]
App=foxmail.exe, foxhot.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By FoxMail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Receive Mail By FoxMail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=FoxMail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[IncrediMail]
App=incmail.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By IncrediMail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Receive Mail By IncrediMail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=IncrediMail IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=IncrediMail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[Outlook Express]
App=msimn.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Outlook Express
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Outlook Express NNTP Activity
Protocol=TCP
RemotePort=119
Direction=OutboundStream
Name=Receive Mail By Outlook Express
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=Outlook Express IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=Outlook Express HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
Name=Outlook Express LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream
Name=Outlook Express Exchange Client Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream
[Microsoft Outlook]
App=outlook.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Microsoft Outlook
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Microsoft Outlook NNTP Activity
Protocol=TCP
RemotePort=119
Direction=OutboundStream
Name=Receive Mail By Microsoft Outlook
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=Microsoft Outlook IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=Microsoft Outlook HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
Name=Microsoft Outlook LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream
Name=Microsoft Outlook Exchange Client Activity
Protocol=TCP
RemotePort=135
Direction=OutboundStream
[Pegasus Mail]
App=winpm-32.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Pegasus Mail
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Receive Mail By Pegasus Mail
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=Pegasus Mail IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=Pegasus Mail HTTP Activity
Protocol=TCP
RemotePort=80-83, 443, 1080, 3128, 8000, 8080, 8088, 11523
Direction=OutboundStream
[The BAT]
App=thebat.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By The BAT
Protocol=TCP
RemotePort=25, 465
Direction=OutboundStream
Name=Read News By The BAT
Protocol=TCP
RemotePort=119
Direction=OutboundStream
Name=Receive Mail By The BAT
Protocol=TCP
RemotePort=110, 995
Direction=OutboundStream
Name=The BAT IMAP Activity
Protocol=TCP
RemotePort=143, 993
Direction=OutboundStream
Name=The Bat LDAP Activity
Protocol=TCP
RemotePort=389, 3268
Direction=OutboundStream
[Express Plus]
App=expressplus.exe
Name=DNS Service
Protocol=UDP
RemotePort=53
Direction=OutboundStream
Name=Send Mail By Express Plus
Protocol=TCP
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -