Author Topic: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!  (Read 12330 times)

0 Members and 1 Guest are viewing this topic.

kwamectc

  • Guest
HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« on: August 06, 2012, 01:36:29 PM »
HELLO!

I'm a Avast user for almost 5 years now, and I never have this issue until now, It seems avast affects Windows Firewall Rules When Im trying to block programs to connect to the internet (to avoid ads), after disabling web and network shield.. its fine now... Is there any way to fix this? without risk of infected? (Web & Network Shield is disabled?)

THANKS!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #1 on: August 06, 2012, 01:49:03 PM »
avast! GUI -> Web Shield -> Expert Settings -> Main Settings
Enable: Scan traffic from well-known browser processes only
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

gdiloren

  • Guest
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #2 on: August 06, 2012, 05:45:19 PM »
avast! GUI -> Web Shield -> Expert Settings -> Main Settings
Enable: Scan traffic from well-known browser processes only
I don't see how this solves the problem. It's the web shield scan that interferes (being a proxy) with all firewalls, now! :(
See: http://forum.avast.com/index.php?topic=93953.120

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #3 on: August 06, 2012, 05:52:29 PM »
I don't see how this solves the problem.

Well, as I didn't answer to you, it doesn't really matter. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #4 on: August 06, 2012, 08:00:30 PM »
<snip unrelated quote>
I don't see how this solves the problem. It's the web shield scan that interferes (being a proxy) with all firewalls, now! :(
See: http://forum.avast.com/index.php?topic=93953.120

I can't see how you can arrive at that conclusion (highlighted) from the link that you posted.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

gdiloren

  • Guest
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #5 on: August 06, 2012, 08:13:45 PM »
Sorry for being a ball b... But I admit this flaw of Comodo firewall or avast and reports of other related trouble are very keeping me disturbed. But I can report I have detected no problem on PFW and AVAST FREE (all parts working together!). 8) Now Comodo says they'll fix the issue in version 6 next January and there is no dispute between Avast and Comodo. In the end, all this is generating mor bad and confusion than good. End of discussion. Thanks! :D
« Last Edit: August 07, 2012, 07:05:17 AM by gdiloren »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #6 on: August 06, 2012, 08:16:50 PM »
Sorry for beigne a ball b... But I admit this flaw of Comodo firewall or avast and reports of orner ce trouble are verront me diseurbed. But I can report I havé détectes nô problème situ PFW.

This topic is not about the Comodo FW..!!!
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

gdiloren

  • Guest
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #7 on: August 07, 2012, 06:49:16 AM »
All right, it "affects Windows FW rules" as in the other topic on Comodo about a program (Firefox) not being stopped...

Offline lukor

  • Administrator
  • Super Poster
  • ***
  • Posts: 1884
    • AVAST Software
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #8 on: August 07, 2012, 09:48:07 AM »
Hi Guys,
we can confirm this - this is indeed happening with avast, and possibly with other proxy like apps - like proxies for removing adds, parental control apps and such. Localhost communication is not a network traffic per se - no packets are leaving your PC - so some developers prefer the simple user experience and others like the complete protection. Hence some firewalls choose to ignore local traffic and others filter it like any other connection. This is a surprise for Comodo, but rather expected for Windows Firewall, where simplicity was always important.


Windows firewall was originally intended for inbound protection only, and as such works great. It can be tweaked to handle localhost traffic and outbound protection as well - so this is not a problem with the underlining technology. Those who want to try tweaking it, please read the following post from Dch48 for nice suggestions.


You can use either Windows 7 Firewall Control, which superimposes an outbound monitor over the Win Firewall or another app called Windows Firewall Notifier which actually turns on the outbound filtering in the Windows Firewall and alerts you to connection attempts allowing you to decide whether they should be allowed or not. The advantage of WFN over W7FC is that WFN only runs when connection attempts happen and shuts back down after a decision has been made. If you desire, you can also set it to make seperate rules for each Windows service that uses  svchost instead of just globally allowing svchost itself.  The problem with the loopback still exists though. Personally I just use the Win Firewall in it's default state and the Avast Firewall set on auto-decide.



As the whole proxy based process of filtering connections brings some confusion (such as this) over time, we are planning to remove the proxy from future versions of avast and replace it with other techniques. Please stay tuned.  :P


Lukas.


Edit: creding Dch48 properly. Thanks Charyb
« Last Edit: August 07, 2012, 03:58:07 PM by lukor »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #9 on: August 07, 2012, 09:54:40 AM »
As the whole proxy based process of filtering connections brings some confusion (such as this) over time, we are planning to remove the proxy from future versions of avast and replace it with other techniques.

Very interesting...!! :)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #10 on: August 07, 2012, 11:54:23 AM »
Hi Guys,
we can confirm this - this is indeed happening with avast, and possibly with other proxy like apps - like proxies for removing adds, parental control apps and such. Localhost communication is not a network traffic per se - no packets are leaving your PC - so some developers prefer the simple user experience and others like the complete protection. Hence some firewalls choose to ignore local traffic and others filter it like any other connection. This is a surprise for Comodo, but rather expected for Windows Firewall, where simplicity was always important.

Windows firewall was originally intended for inbound protection only, and as such works great. It can be tweaked to handle localhost traffic and outbound protection as well - so this is not a problem with the underlining technology. Those who want to try tweaking it, please read the following post from Charyb for nice suggestions.
<snip quote>
As the whole proxy based process of filtering connections brings some confusion (such as this) over time, we are planning to remove the proxy from future versions of avast and replace it with other techniques. Please stay tuned.  :P

Lukas.

Twang, just getting tuned.

Is this a long term aspiration, e.g. avast8 or medium term, avast 7.1 or 7.5 program increment ?
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

gdiloren

  • Guest
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #11 on: August 07, 2012, 04:10:39 PM »
Finally, somethinng is moving! ;)

hlecter

  • Guest
Re: Windows 7 firewall with outbound protection
« Reply #12 on: August 07, 2012, 04:48:42 PM »
Quote from:  Dch48
You can use either Windows 7 Firewall Control, which superimposes an outbound monitor over the Win Firewall or another app called Windows Firewall Notifier which actually turns on the outbound filtering in the Windows Firewall and alerts you to connection attempts allowing you to decide whether they should be allowed or not. The advantage of WFN over W7FC is that WFN only runs when connection attempts happen and shuts back down after a decision has been made. If you desire, you can also set it to make seperate rules for each Windows service that uses  svchost instead of just globally allowing svchost itself.  The problem with the loopback still exists though. Personally I just use the Win Firewall in it's default state and the Avast Firewall set on auto-decide.


Just a hint for those trying to set up Windows 7 Firewall with outbound protection without using the tools mentioned above:

This thread at Wilders originally written for Vista but IMO still very useful gave me all the info I needed (and much more) to set up
my Win 7 Pro 64 bits with outbound protection some months ago.

This is the best info I could dig up half a year ago and it really helped me.

It will take some time setting it up, because no info on blocked outbound connections in real time,
but logging of blocked and/or allowed connections is possible.

Here you go, be warned and have fun:

http://www.wilderssecurity.com/showthread.php?t=239750


 


Offline Bellzemos

  • Avast Evangelist
  • Poster
  • ***
  • Posts: 621
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #13 on: July 02, 2013, 03:53:41 AM »
As the whole proxy based process of filtering connections brings some confusion (such as this) over time, we are planning to remove the proxy from future versions of avast and replace it with other techniques. Please stay tuned.  :P

When? :)
Intel Core i7 Q 740 @ 1.73 GHz, 6 GB RAM, Windows 7 Ultimate x64 SP1, Avast! Free Antivirus, Malwarebytes Anti-Malware (free version) and Sandboxie (paid version).

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: HELP!!! AVAST AFFECTS WINDOWS FIREWALL RULE!!
« Reply #14 on: July 02, 2013, 12:32:45 PM »
I believe that it is an aspiration for avast 9.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security