Firewall

🔒 General Rule Matching Overview

✅ OUTBOUND CONNECTION SEQUENCE

  1. Check if Firewall Protection is ON
  2. Determine Firewall Mode (e.g., Normal, Learning, etc.)
  3. Check if OUTBOUND rules are enabled
  4. Check if Application is in:
    • ✅ Standard Application White List
    • ✅ User Application White List
  5. Check if a specific OUTBOUND Rule exists for this application
  6. Check Rule STATUS (Enabled / Disabled)
  7. Check applicable Remote Port (specific / any)
  8. Check if a User Decision exists

✅ INBOUND CONNECTION SEQUENCE

  1. Check if Firewall Protection is ON
  2. Determine Firewall Mode
  3. Check if INBOUND rules are enabled
  4. Match STAR Rules (Remote IP = *)
  5. Check Rule STATUS (Enabled / Disabled)
  6. Match LOCAL PORT (specific / any)
  7. Check for a User Decision

🚦 OUTGOING CONNECTION MATCHING – DETAILED LOGIC

  1. Company White-List
    • File: PROGRAM FILES\NET PROTECTOR\NPPROG.DAT
    • ✅ If listed, ALLOW connection
  2. Application Allow / Block List
    • APPLICATIONS > APPLICATION ALLOW LIST → ✅ ALLOW
    • APPLICATIONS > APPLICATION BLOCK LIST → ❌ BLOCK
  3. Outbound Rules
    • Location: MANAGE OUTBOUND RULES
    • ✅ If rule exists and is Enabled, allow based on:
      • App path
      • Port (single, multiple, or all *)
    • ❌ If not in rule or rule is disabled → move to next check
  4. User Decision
    • Based on application path and port
    • ✅ ALLOW or ❌ BLOCK if user had previously selected
    • Stored decision applied automatically
  5. Popup Prompt
    • If no rule/decision exists → prompt user for ALLOW/BLOCK
  6. Timeout
    • If user doesn’t respond in time → default action may apply

📌 Examplese

🟢 Case 1:

  • Application: myapp.exe
  • Port: 25
  • Decision: User selected “Remember my answer – ALLOW”
  • ✅ Outcome: Connection ALLOWED

🔴 Case 2:

  • Application: myapp.exe
  • Port: 443
  • Decision: User selected “Remember my answer – BLOCK”
  • ❌ Outcome: Connection BLOCKED

🟢 Case 3:

  • Application: myapp.exe
  • Port: 80 (but “All Ports” ticked)
  • In Application White List
  • ✅ Outcome: All ports for this application are now ALLOWED

✅ Key Conclusion

  • If an application is in the Application Allow List (whitelist), it takes top priority.
  • All connections for that application will be allowed, regardless of any individual port-based user decisions.