Quick Firewall Question

Associate
Joined
22 Dec 2002
Posts
1,190
Location
Teesside, UK
Hi, Just a quick question re Firewalls

When you allow a program (an EXE for example) does that automatically allow any ports that the EXE relies upon to be open.

Lets say I know that a particular application needs 4002 port. I can't just enable the EXE can I. I need to specify 4002 right?
 
I thought it depends on the firewall.

If it is a Windows based firewall, it probably has concept of an .EXE then it should work.

If it is hardware based, then you'll need to open up the ports you need on the router.
 
Hi,

Yes it's the windows based firewall. Just did some tests and unblocking the EXE was not enough and I had to open the specific port.

Just wondering why this is the case though.

Could it be that when you install a program more than just the EXE needs to access the network.
 
Ususually software firewalls if they are advanced enough will have two types of rule sets. They will have a checksum list of applications to keep a track of them. They will then have a port rule list which will often be based or at least use the checksum list of applications.

This way if for example someone knows you have X application on your pc and Y port is open due to that. They can't then go and rename a malicious bit of software the same name and trick the firewall in to opening that port. Well thats the logic behind it, not that its likely scenario.
 
Back
Top Bottom