Firewall++ : Network Security Monitoring Tool

Requirements:

Instruction

1. Edit settings

• settings.txt

2. Edit rule tables

• out.txt (Outbound rules)
• in.txt (Inbound rules)

          Rules are executed in sequential order.
          The sequence is terminated on a match,
          with one of the following actions:
          
          ACCEPT - accept the connection and show activity
          ACCEPT_HIDE - accept the connection but hide activity
          REJECT - reject the connection with TCP RST
          DROP - drops the packet silently
          
          If no match is found, the default is DROP.
          
          # precedes a comment
          * represents a wildcard
          \ escapes the next character eg. space in process name
          IP Subnets are allowed in CIDR format eg. 192.168.0.0/24

3. Run firewall++.exe

Known Limitations

• Ports are not validated and treated as strings. "001" not equals "1"
• Invalid action defaults to DROP
• Only supports TCP and UDP. IPv6, ICMP and other protocols are dropped

Changes

v0.97.4

• Disabled close [X] button (Windows forcefully terminates after 5 seconds)

v0.97.1

• Changed to WinDivert Variant C (compatible with Windows 7/Server 2008)
• Excluded loopback from firewall (problematic)

v0.96

• Added restore Windows Firewall on shutdown/logoff
• Excluded loopback from firewall (problematic)

v0.95

• Fixed reload bug

v0.94

• Added escape character
• Set UAC execution level to Administrator

v0.93

• Added settings
• Added logging mode
• Added colours to UI
• Added mutex to socket and network handles
• Added disable Windows Firewall on startup
• Added restore Windows Firewall on close
• Added legend
• Fixed display issues
• Added action REJECT

v0.92

• Fixed minor memory leak
• Added reload
• Added refresh interval
• Added pause refresh
• Added quit