@@ -87,11 +87,10 @@ to your firewall.
87
87
88
88
## Core benefits of this firewall
89
89
90
- 1 . System administrators would usually evade setting up detailed firewall because detailed firewall
91
- configuration is time consuming process, takes a lot of troubleshooting, changes require
92
- testing and security auditing and it only gets worse if you want to deploy firewall to hundreds or
93
- thousands of remote computers, for example not all computers might have same software or restriction
94
- requirements.
90
+ 1 . Detailed firewall configuration is time consuming process, takes a lot of troubleshooting,
91
+ changes require testing and security auditing and it only gets worse if you need to deploy firewall
92
+ to hundreds or thousands of remote computers, for example not all computers might have same software
93
+ or restriction requirements.
95
94
96
95
2 . Unlike firewall rules in control panel, these rules are loaded into GPO firewall
97
96
(Local Group Policy), meaning system settings changes or random programs which install rules as
@@ -111,18 +110,18 @@ additional work.
111
110
due to ex. uninstalled program, a missing system service which no longer exists, renamed
112
111
executable after Windows update and similar reasons.
113
112
114
- 6 . Unlike default ( predefined) Windows firewall rules, these rules are more restrictive such as,
113
+ 6 . Unlike predefined Windows firewall rules, these rules are more restrictive such as,
115
114
tied to explicit user accounts, rules apply to specific ports, network interfaces, specific
116
115
executables, services etc. all of which is learned automatically from target system.
117
116
118
117
7 . Updating, filtering or searching rules and attributes such as ports, addresses and similar is
119
- much easier since these rules are in scripts (serialized) , you can use editor tools such as regex,
120
- multicursor or ` CTRL + F ` to perform bulk operations on your rules, doing this in any firewall GUI
121
- is beyond all pain or not possible due to interface limitations.
118
+ much easier since these rules are in scripts, you can use editor tools such as regex, multicursor
119
+ or ` CTRL + F ` to perform bulk operations on your rules, doing this in any firewall UI is not always
120
+ possible due to interface limitations.
122
121
123
- 8 . A good portion of code is dedicated to provide cross platform and automated solution to build and
124
- define firewall specialized for target system and users, minimizing the need to do something
125
- manually thus saving you much valuable administration time.
122
+ 8 . A good portion of code is dedicated to provide automated solution to build and define firewall
123
+ specialized for target system and users, minimizing the need to do something manually thus saving
124
+ you much valuable administration time.
126
125
127
126
[ Table of Contents] ( #table-of-contents )
128
127
@@ -134,13 +133,11 @@ This project `Windows Firewall Ruleset` is licensed under the `MIT` license.
134
133
135
134
License and Copyright notices are maintained ** "per file"** .
136
135
137
- [ Table of Contents] ( #table-of-contents )
138
-
139
136
## Requirements
140
137
141
138
Following table lists currently tested operating systems
142
139
143
- | OS | Edition | Build | Architecture |
140
+ | OS | Edition | Version | Architecture |
144
141
| ------------------- | ------------- | ----------- | ------------ |
145
142
| Windows 10 | Pro | 1809 - 20H2 | x64 |
146
143
| Windows 10 | Pro Education | 20H2 | x64 |
@@ -165,7 +162,7 @@ Following table lists currently tested operating systems
165
162
166
163
- All operating systems 10.0 (Major 10, Minor 0) and above are supported,
167
164
but only those editions listed in the table above are actively tested.\
168
- "Build " column indicates tested releases, however only latest builds continue to be tested.\
165
+ The "Version " column lists tested releases, however only latest OS builds continue to be tested.\
169
166
A list of other untested but supported systems and features is in [ The future] ( #the-future )
170
167
- PowerShell "Core" is not built into Windows, you will need to install it separately or use
171
168
[ Windows PowerShell] ( Readme/WindowsPowerShell.md ) which is part of operating system.
@@ -178,8 +175,8 @@ to easily switch between branches or to contribute code.
178
175
own needs or contribution.
179
176
- If you get VSCode, you'll also need PowerShell extension for code navigation and PowerShell
180
177
language features.
181
- - To navigate and edit code with VSCode, ` PSScriptAnalyzer ` is recommended otherwise editing
182
- experience may behave really odd due to other project settings.
178
+ - To navigate and edit code with VSCode ` PSScriptAnalyzer ` is requirement, otherwise editing
179
+ experience may behave really odd due to various repository settings.
183
180
- There are no hardware requirements but if you plan to write code recommendation is min. 8GB of
184
181
memory and SSD drive to comfortably work on project, otherwise to just deploy rules to your personal
185
182
firewall less than that will work just fine.
@@ -241,7 +238,7 @@ contains rules will be significantly slower (depends on number of existing rules
241
238
- All errors and warnings will be saved to ` Logs ` directory, you can review these logs later if you
242
239
want to fix some problem, most warnings can be safely ignored but errors should be resolved.
243
240
- Any rule that results in "Access is denied" while loading should be reloaded by executing specific
244
- script again, see [ FAQ.md ] ( Readme/FAQ.md ) for more information on why this may happen.
241
+ script again, see [ FAQ] ( Readme/FAQ.md ) for more information on why this may happen.
245
242
- If the project was manually downloaded, transferred from another computer or media then you should\
246
243
unblock all files in project first to avoid YES/NO spam questions for every executing script,
247
244
by running ` Scripts\Unblock-Project.ps1 ` \
@@ -255,7 +252,7 @@ PowerShell console may need to be restarted for "Controlled folder access" chang
255
252
user that is Administrator, if you're Administrator on your computer you'll have to either create
256
253
standard user account and use that for your everyday life or modify code to allow Administrator
257
254
online access.\
258
- See [ FAQ entry ] ( Readme/FAQ.md#does-this-firewall-project-give-me-the-right-protection ) for more
255
+ See [ FAQ] ( Readme/FAQ.md#does-this-firewall-project-give-me-the-right-protection ) for more
259
256
information why using Administrator account is not recommended for security reasons.
260
257
- Software or Windows updates may rename executables or their locations, also user accounts may be
261
258
renamed by Administrator, therefore it's important to reload specific rules from time to time as
0 commit comments