The built-in Windows firewall seems to only block incoming ports, but not any outgoing traffic.

I am looking for an application to install on an xp machine which can be configured a way to block all outgoing connection attempts.

I want to still allow incoming connection attempts on a few ports for testing.

link|improve this question

Huh, should be possible to block all outgoing traffic according to this answer: How to block all traffic but one IP in Windows Firewall? – slhck Oct 8 '11 at 18:22
2  
Ack, I voted to close thinking it was a dupe fo the other. It has the answer, except it's for Windows 7, and this is XP. I don't think there's actually a way to (as) easily block all outgoing traffic with XP's firewall, but there may very well be? I don't have an XP machine handy to check. – techie007 Oct 8 '11 at 19:05
Ah, but then again, this is Windows XP – can anyone confirm this is the same? @techie007 Hah, hivemind. – slhck Oct 8 '11 at 19:05
Pretty sure there is no way to do it in XP. Please suggest a 3rd party application which works for this purpose. – steampowered Oct 8 '11 at 22:08
Agnitum Outpost - you can try even Free version for this functionality – Lazy Badger Oct 9 '11 at 2:44
feedback

3 Answers

up vote 3 down vote accepted

Comodo Personal Firewall is a free replacement for the Windows Firewall that will query whether you want an application to be able to make outbound connections the first time that application is used. You will also be able to allow programs to open incoming ports so you should be fine there too.

It's pretty comprehensive, you can (I believe) add the most commonly used applications during setup, so Firefox, IE and most email programs are not blocked by default.

The configuration is relatively straightforward and the baloon popups that appear when an application tries to access the network were quite informative when I used it last.

Unless you want Antivirus as well try to make sure that you only download the Firewall installer, their site makes it a bit too easy to get both by mistake.

link|improve this answer
Thank you, I plan to try this during the week and I'll report back if it is successful. I expect it will work great. – steampowered Oct 9 '11 at 13:25
This worked perfectly. I spent way to much time trying to get the AVG 2011 firewall to work in the past. The Commodo firewall allowed me to make my granular rules exactly like I wanted, and this solved my problem. Thanks! – steampowered Oct 13 '11 at 22:28
feedback

To get the level of fine grain control you're looking for I would recommend checking out kerio v2 firewall. Back in the day when I still had WinXP setups this was my firewall of choice due to its light resource usage, effectiveness and ease of use.

Note that Kerio is a rule-based packet filtering firewall -- the rules you setup are processed in a top-down first-to-match fashion. Packets that don't match any of the rules are automatically dropped into the ether. Even though it's no longer supported it still remains to be a very effective firewall. In fact, if you've ever tweaked Win7's built-in firewall you'll find many interface and functionality similarities with Kerio.

If you decide to try it out you might find these links helpful:

link|improve this answer
I would prefer not to use an app which hasn't been supported since 2004 if there is something available which is still being supported. – steampowered Oct 9 '11 at 14:34
feedback

There's no way to do what you want with the firewall built into Windows XP. You'll need a third party firewall to do that.

link|improve this answer
I edited the question to make it less of a software-recommendation, but the OP asked for a way to do it, even with a third-party app. They even said that it does not seem to work with the built-in firewall. So maybe you could suggest some application that would effectively allow them to do this. – slhck Oct 8 '11 at 19:13
Can you please suggest a 3rd party app? – steampowered Oct 9 '11 at 0:33
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.