Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

With the Windows 7/2008R2 firewall it doesn't seem possible to explicitly block connections that use on a per process basis. I'm just wondering if I've missed something?

share|improve this question
Considering that many programs use loopback TCP connections as a form of IPC ­— why would you want to block that?! – grawity Mar 17 '12 at 20:50
To control which processes are able to pass through a proxy, installed by a popular antivirus program. It 'conveniently' opens a hole that allows any connection over HTTP, even if the application is specifically blocked or has no firewall rules at all. – Pulse Mar 17 '12 at 22:27

Given that is the loopback device, I would assume that special rules apply.
It wouldn't surprise me if any traffic on the loopback device simply bypasses (at least) the Windows firewall.

share|improve this answer
That's exactly what's happening – Pulse Mar 17 '12 at 22:19
I'm not 100% sure on this, but I would assume that loopback traffic must not be intercepted. I just believe I vaguely remember something like that, but I can't think of where I read it right now. – Oliver Salzburg Mar 17 '12 at 22:37

The firewall doesn't block/inspect the localhost/loopback address ( because it's your computer. So since the target and source are the same, there's really nothing to firewall.

share|improve this answer
Unless one has a transparent HTTP proxy operating on that simply allows any outbound connection regardless of rules. It's also possible to block these connections, by applying an outbound block to all applications. It simply won't work for individual processes. – Pulse Mar 17 '12 at 22:22
And this is a Windows firewall issue. Most reasonable third-party firewalls allow these connections to be controlled/blocked. – Pulse Mar 17 '12 at 22:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .