1
135 UDP
any
201
deny
direc=both & proto=17 & lport=135 & rport=135
always
1412562944
Default
1
135 TCP
any
202
deny
direc=both & proto=6 & lport=135 & rport=135
always
1412579328
Default
1
137 UDP
any
203
deny
direc=both & proto=17 & lport=137 & rport=137
always
1412595712
Default
1
137 TCP
any
204
deny
direc=both & proto=6 & lport=137 & rport=137
always
1412612096
Default
1
139 UDP
any
205
deny
direc=both & proto=17 & lport=139 & rport=139
always
1412628480
Default
1
139 TCP
any
206
deny
direc=both & proto=6 & lport=139 & rport=139
always
1412644864
Default
1
445 UDP
any
207
deny
direc=both & proto=17 & lport=445 & rport=445
always
1412661248
Default
1
445 TCP
any
208
deny
direc=both & proto=6 & lport=445 & rport=445
always
1412677632
Default
1
traceroute
any
209
permit
direc=both & proto=17 & (lport>=32769 & lport<=65535) & (rport>=32769 & rport<=65535)
always
1412694016
Default
1
1025 TCP
any
210
deny
direc=both & proto=6 & lport=1025 & rport=1025
always
1412710400
Default
1
1026 TCP
any
211
deny
direc=both & proto=6 & lport=1026 & rport=1026
always
1412726784
Default
1
Internet Group Management Protocol
any
212
deny
proto = 2
OFF
always
1409286145
1
Ping and Tracert in
any
213
permit
proto=ICMP[8] & direc=in
ON
always
1409286145
1
Ping and Tracert out
any
214
permit
proto=ICMP[8] & direc=out
ON
always
1409286145
1
Other ICMP packets
any
215
permit
proto=ICMP
ON
always
1409286145
1
Dynamic Host Configuration Protocol
any
216
permit
lport=68 & rport=67 & proto=UDP & direc=out
ON
always
1409286145
1
Domain Name System
any
217
permit
proto=UDP & rport=53 & direc=out
ON
always
1409286145
1
Virtual Private Network
any
218
permit
(direc=out & proto=47) | (proto=TCP & rport=1723 & direc=out) | (direc=out & proto=50) | (direc=out & proto=108)
ON
always
1409286145
1
Broadcasts (Trusted)
any
219
permit
laddr=255.255.255.255 | raddr=255.255.255.255
ON
always
1409286145
1
Broadcasts
any
220
permit
laddr=224.0.0.0-239.255.255.255
OFF
always
1409286144
1
C:\WINDOWS\System32\lsass.exe
221
ask
direc = in
ON
always
1409286949
1
C:\WINDOWS\System32\lsass.exe
222
permit
direc = out
ON
always
1409286951
1
(Trusted)
C:\WINDOWS\System32\winlogon.exe
223
permit
((raddr=127.0.0.1)) & (direc = in)
ON
always
1409286952
1
C:\WINDOWS\System32\winlogon.exe
224
ask
direc = in
ON
always
1409286953
1
C:\WINDOWS\System32\winlogon.exe
225
permit
direc = out
ON
always
1409286955
1
(Trusted)
C:\WINDOWS\System32\userinit.exe
226
permit
((raddr=127.0.0.1)) & (direc = in)
ON
always
1409286956
1
C:\WINDOWS\System32\userinit.exe
227
ask
direc = in
ON
always
1409286957
1
C:\WINDOWS\System32\userinit.exe
228
permit
direc = out
ON
always
1409286959
1
(Trusted)
C:\WINDOWS\System32\svchost.exe
229
permit
((raddr=127.0.0.1)) & (direc = in)
ON
always
1409286960
1
C:\WINDOWS\System32\svchost.exe
230
ask
direc = in
ON
always
1409286961
1
C:\WINDOWS\System32\svchost.exe
231
permit
direc = out
ON
always
1409286963
1
Microsoft File and Printer Sharing
any
232
permit
direc=in & proto = UDP & (lport=137 | lport=138 | lport = 445 | rport=137 | rport=138 | rport = 445)
ON
always
1409286149
1
Microsoft File and Printer Sharing (Trusted)
any
233
permit
((raddr=127.0.0.1)) & (direc=in & proto = TCP & (lport=137 | lport=138 | lport=139 | lport = 445))
ON
always
1409286152
1
Microsoft File and Printer Sharing
any
234
ask
direc=in & proto = TCP & (lport=137 | lport=138 | lport=139 | lport = 445)
ON
always
1409286153
1
Microsoft File and Printer Sharing
any
235
permit
direc=out & proto = UDP & (lport=137 | lport=138 | lport = 445 | rport=137 | rport=138 | rport = 445)
ON
always
1409286151
1
Microsoft File and Printer Sharing
any
236
permit
direc=out & proto = TCP & (rport=137 | rport=138 | rport=139 | rport = 445)
ON
always
1409286159
1
any
4294967292
ask
direc=in
OFF
always
1409286165
1
any
4294967294
permit
direc=out
OFF
always
1409286167
1
any
237
ask
(proto=TCP | proto=UDP) & rport=4090 & direc=out & direc=both
ON
always
1409286169
1
Admin->Engine connection
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
0
permit
(proto=TCP | proto=UDP) & direc=in & lport=44334 & raddr=127.0.0.1
ON
always
1412546560
1
Admin->Engine connection
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
1
permit
(proto=TCP | proto=UDP) & direc=out & rport=44334 & raddr=127.0.0.1
ON
always
1412562944
1
Popup logger
any
2
permit
proto=TCP & direc=out & rport=44501 & raddr=127.0.0.1
ON
always
1412579328
1
DNS for KPF4SS
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
3
permit
proto=UDP & rport=53 & direc=out
ON
always
1412595712
1
DNS for KPF4GUI
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
4
permit
proto=UDP & rport=53 & direc=out
ON
always
1412612096
1
Engine->Admin connection
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
5
permit
(proto=TCP | proto=UDP) & direc=out & raddr=127.0.0.1
ON
always
1412628480
1
Crashes upload
C:\Program Files\Sunbelt Software\Personal Firewall 4\assist.exe
6
permit
proto=TCP & direc=out & raddr = 195.39.55.8
OFF
always
1412644864
1
KPF4 Updates server
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
7
permit
direc=out & proto=TCP
OFF
always
1412661248
1
Deny everything for kpf4ss.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
8
deny
direc=both
OFF
always
1412677632
1
Deny everything for assist.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\assist.exe
9
deny
direc=both
OFF
always
1412694016
1
Services and Controller app
C:\WINDOWS\System32\services.exe
permit
ask
permit
BF4CBEFDCE42A699389791647CB95CA2
0
2
0
1
Windows NT Logon Application
C:\WINDOWS\System32\winlogon.exe
permit
ask
permit
8B6E6BB5D451F8BBC0621203B687D993
0
2
0
1
Windows Logon UI
C:\WINDOWS\System32\logonui.exe
permit
ask
permit
4281CDE7D4F5DF794BDD09EAFC3A4D6D
0
2
0
1
Client Server Runtime Process
C:\WINDOWS\System32\csrss.exe
permit
ask
permit
8119AA861C1200B35993172B72FE8196
0
2
0
1
Client Server Runtime Process
C:\WINDOWS\System32\smss.exe
permit
ask
permit
55DEE79ECAA27BDF10509F8D1261378F
0
2
0
1
Userinit Logon Application
C:\WINDOWS\System32\userinit.exe
permit
ask
permit
323D3FFCBF99C59B2D20B4C5A7ECE347
0
2
0
1
Windows explorer
C:\WINDOWS\explorer.exe
permit
ask
permit
F4AF85D918E83D71341FCE2AA5318181
0
2
0
1
Generic Host Process for Win32 Services
C:\WINDOWS\System32\svchost.exe
permit
ask
permit
B3C95BFEEF6781A82A1C429F466A3A11
0
2
0
1
Kerio Personal Firewall 4 - GUI
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
permit
permit, log
permit
200A73F318BE7FDB07615434F430C66C
0
1
0
1
Kerio Personal Firewall 4 - Service
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
permit
ask
permit
5225E1EA3BD37F38FAE7B614D1E94D88
0
1
0
1
Kerio Core Dumper
C:\Program Files\Kerio\Personal Firewall 4\assist.exe
permit
permit, log
permit
3B70A6A989EC2F8461B478E90D647267
0
1
0
1
KPF configuration conversion tool
C:\Program Files\Kerio\Personal Firewall 4\cfgconv.exe
permit
permit, log
permit
0085B1493423DAA570118683ED5F7C58
0
1
0
1
Default rule
*
ask
ask
ask
00000000000000000000000000000000
4294967295
1
4294967295
1
Kerio Personal Firewall 4 - GUI
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
permit
permit, log
permit
34D8182F75D145FD5C1B0384400E588B
0
1
0
1
Kerio Personal Firewall 4 - Service
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
permit
ask
permit
37F2DECEBEDC9179A149CC40968CDF5A
0
1
0
1
Kerio Core Dumper
C:\Program Files\Sunbelt Software\Personal Firewall 4\assist.exe
permit
permit, log
permit
3B70A6A989EC2F8461B478E90D647267
0
1
0
1
KPF configuration conversion tool
C:\Program Files\Sunbelt Software\Personal Firewall 4\cfgconv.exe
permit
permit, log
permit
0085B1493423DAA570118683ED5F7C58
0
1
0
1
135 UDP
any
1048576
deny
direc=both & proto=17 & lport=135 & rport=135
always
200
Default
1
135 TCP
any
2097152
deny
direc=both & proto=6 & lport=135 & rport=135
always
201
Default
1
137 UDP
any
3145728
deny
direc=both & proto=17 & lport=137 & rport=137
always
202
Default
1
137 TCP
any
4194304
deny
direc=both & proto=6 & lport=137 & rport=137
always
203
Default
1
139 UDP
any
5242880
deny
direc=both & proto=17 & lport=139 & rport=139
always
204
Default
1
139 TCP
any
6291456
deny
direc=both & proto=6 & lport=139 & rport=139
always
205
Default
1
445 UDP
any
7340032
deny
direc=both & proto=17 & lport=445 & rport=445
always
206
Default
1
445 TCP
any
8388608
deny
direc=both & proto=6 & lport=445 & rport=445
always
207
Default
1
traceroute
any
9437184
permit
direc=both & proto=17 & (lport>=32769 & lport<=65535) & (rport>=32769 & rport<=65535)
always
208
Default
1
1025 TCP
any
10485760
deny
direc=both & proto=6 & lport=1025 & rport=1025
always
209
Default
1
1026 TCP
any
11534336
deny
direc=both & proto=6 & lport=1026 & rport=1026
always
210
Default
C:\WINDOWS\System32\lsass.exe
ask
permit
ask
permit
0
0
201
0
2
C:\WINDOWS\System32\winlogon.exe
permit
permit
ask
permit
0
0
202
0
2
C:\WINDOWS\System32\userinit.exe
permit
permit
ask
permit
0
0
203
0
2
C:\WINDOWS\System32\svchost.exe
permit
permit
ask
permit
0
0
204
0
2
NETBIOS
permit
permit
ask
permit
0
0
1
0
2
Any other application
ask
permit
ask
permit
0
0
5
4294967291
2
KVPN
ask
ask
ask
ask
0
0
6
0
3
Igmp
Internet Group Management Protocol
deny
deny
0
0
1
2147483648
1
proto = 2
OFF
PingIn
Ping and Tracert in
permit
permit
0
0
1
2147483648
2
proto=ICMP[8] & direc=in
ON
PingOut
Ping and Tracert out
permit
permit
0
0
1
2147483648
3
proto=ICMP[8] & direc=out
ON
OtherIcmp
Other ICMP packets
permit
permit
0
0
1
2147483648
4
proto=ICMP
ON
Dhcp
Dynamic Host Configuration Protocol
permit
permit
0
0
1
2147483648
5
lport=68 & rport=67 & proto=UDP & direc=out
ON
Dns
Domain Name System
permit
permit
0
0
1
2147483648
6
proto=UDP & rport=53 & direc=out
ON
VPN
Virtual Private Network
permit
permit
0
0
1
2147483648
7
(direc=out & proto=47) | (proto=TCP & rport=1723 & direc=out) | (direc=out & proto=50) | (direc=out & proto=108)
ON
Bcast
Broadcasts
permit
permit
0
0
1
0
9
BCAST
Połączenie lokalne
000000005DD4BE72BEB4F6C21958C7C68CC6B356
1
1
536870912
1
Połączenie lokalne
00000000A68EB45FEAC556032E1A49F064785517
1
1
536870912
1
0000000000000000000000000000000000000000
127.0.0.1
1073741830
1
Loopback
6
TCP
Transmission Control Protocol
0
17
UDP
User Datagram Protocol
0
1
ICMP
Internet Control Message Protocol
0
2
IGMP
Internet Group Management Protocol
0
7
Echo
Echo
20
FTP-data
File Transfer Protocol [Default Data]
21
FTP-control
File Transfer Protocol [Control Port]
23
Telnet
Telnet
25
SMTP
Simple Mail Transfer Protocol
53
DNS
Domain Name System
67
dhcps
Dynamic Host Configuration Protocol Server
68
dhcpc
Dynamic Host Configuration Protocol Client
69
tFTP
Trivial File Transfer Protocol
80
HTTP
World Wide Web HTTP
109
POP 2
Post Office Protocol - Version 2
110
POP 3
Post Office Protocol - Version 3
115
sFTP
Simple File Transfer Protocol
119
nntp
Network News Transfer Protocol
123
ntp
Network Time Protocol
137
netbios-ns
NETBIOS Name Service
138
netbios-dgm
NETBIOS Datagram Service
139
netbios-ssn
NETBIOS Session Service
143
imap4
Internet Message Access Protocol
194
irc
Internet Relay Chat Protocol
213
IPX
IPX
389
LDAP
Lightweight Directory Access Protocol
396
netware-ip
Novell Netware over IP
443
https
https MCom
445
microsoft-ds
Microsoft-DS
531
conference
chat
636
ldaps
LDAP over TLS/SSL
135
125
33434
33534
32769
65535
1026
1025
0
2048000
0
syslog://127.0.0.1:514
124
1140181731
License is expired
0
3
0
0
1
.*update\.microsoft\.com
0
0
0
0
0
0
0
0
0
0
0
2
0
1
1
0
0
1
1
1
1
0
0
0
0
0
0
0
1
.*adframe.*
8
0
1
.*/ad-handler/.*
8
0
1
.*[bB]anner.?/.*
8
0
1
.*/please/showit.*
8
0
1
.*/popup.?/.*
8
0
1
.*/adrot/.*
8
0
1
.*\.gator\.com
8
0
1
.*adserv.*
8
0
1
ad((([ix0-9]|(s[^l])).*)|s)?\..*\..*
8
0
1
.*\.ad([0-9]*)\..*\..*
8
0
1
1\.im\.cz
/r/.*
8
0
1
.*/reklama/.*
8
0
1
.*\.doubleclick\..*
8
0
1
.*/ad[isx0-9]?[/?].*
8
0
1
ar\.atwola\.com
/content.*
8
0
1
deny, log, popup
deny, log, popup
deny, log