Printable View
Hi all,
Mainly I'm New to PC and windows world (windows XP). I know the Windows Firewall is for security purpose. But can anybody tell me the best way to deal with it so my PC can be always safe from any kind of virus and all. thanks for any advice and suggestions.
A firewall can help prevent hackers or malicious software (such as worms) from gaining access to your computer through a network or the Internet. A firewall can also help stop your computer from sending malicious software to other computers.
There are three settings on the General tab in Windows Firewall. Here's what they do and when you should use them:
On (recommended)
This setting is selected by default. When Windows Firewall is on, most programs are blocked from communicating through the firewall. If you want to unblock a program, you can add it to the Exceptions list (on the Exceptions tab). For example, you might not be able to send photos in an instant message until you add the instant messaging program to the Exceptions list. To add a program to the Exceptions list, see Allow a program to communicate through Windows Firewall.
Block all incoming connections
This setting blocks all unsolicited attempts to connect to your computer. Use this setting when you need maximum protection for your computer, such as when you connect to a public network in a hotel or airport, or when a computer worm is spreading over the Internet. With this setting, you are not notified when Windows Firewall blocks programs, and programs on the Exceptions list are ignored.
When you select Block all incoming connections, you can still view most webpages, send and receive e‑mail, and send and receive instant messages.
Off (not recommended)
Avoid using this setting unless you have another firewall running on your computer. Turning off Windows Firewall might make your computer (and your network, if you have one) more vulnerable to damage from hackers and malicious software (such as worms).
Windows Firewall now has three settings: On, On with no exceptions, and Off.
On: Windows Firewall is turned on by default, and normally you should leave it that way. When you choose this setting, Windows Firewall blocks all unsolicited requests to connect to your computer, except for requests to programs or services selected on the Exceptions tab.
On with no exceptions: When you select the Don't allow exceptions check box, Windows Firewall blocks all unsolicited requests to connect to your computer, including requests to programs or services selected on the Exceptions tab. Use this setting when you need maximum protection for your computer, such as when you connect to a public network in a hotel or airport, or when a dangerous virus or worm is spreading over the Internet.
Tip There is no need to keep Don't allow exceptions selected all the time, because when it is, some of your programs might not work correctly, and the following services are blocked from accepting unsolicited requests:
- File and Printer Sharing
- Remote Assistance and Remote Desktop
- Discovery of network devices
- Preconfigured programs and services on the exceptions list
- Additional items that you've added to the exceptions list
Note When you select Don't allow exceptions, you can still send and receive e-mail, use an instant messaging program, or view most Web pages.
Off: This setting turns Windows Firewall off. When you choose this setting, your computer is much more vulnerable to harm from unknown intruders or viruses from the Internet. This setting should only be used by advanced users for computer administration purposes, or if your computer is protected by another firewall.
If you need to make firewall settings repeatedly on a single computer as conditions change or, perhaps, on a fleet of computers you’ll find working with Windows Firewall (the Control Panel application) or Windows Firewall With Advanced Security to be a bit cumbersome. The Netsh command, using its Firewall or Advfirewall context, provides an alternative way to view or modify all manner of Windows Firewall settings. For example, you can enable Windows Firewall with this command:
The Netsh Firewall context can be considered the basic context, where you can find current firewall settings at a high level. It’s roughly comparable to the Windows Firewall application in Control Panel. From the command prompt, you can see the basic configuration by typing:Code:netsh firewall set opmode enable
Code:netsh firewall show config