home *** CD-ROM | disk | FTP | other *** search
/ PC World 2005 December / PCWorld_2005-12_cd.bin / software / temacd / outpostpro / OutpostProInstall.exe / {app} / preset.lst < prev    next >
File List  |  2005-09-09  |  102KB  |  5,564 lines
  1. ; This file contains Outpost Firewall presets descriptions.
  2. ; Preset is a collection of predefined rule descriptions that provides for easy and quick 
  3. ; application rules configuration.
  4. ;
  5. ; Here goes the preset description example.
  6. ;
  7. ; Preset display name that is shown in the Create Rule dialog. 
  8. ; [Internet Explorer]
  9. ;
  10. ; Here go descriptions of the rules that are included in this preset.
  11. ; For each rule the following parameters can be specified:
  12. ;
  13. ; Value that determines if the preset is shown (1) in the Presets list in the Rules Wizard or hidden (0). 
  14. ; VisibleState: 0
  15. ;
  16. ; Application display name and executable name. If specified, makes the rule applied to only that application.
  17. ; Exe:
  18. ; Internet Explorer, iexplore.exe
  19. ;
  20. ; Default rule state. Set to 0 to disable the rule.
  21. ; DefaultState: 1
  22. ;
  23. ; Rule display name.
  24. ; RuleName: Internet Explorer HTTP connection
  25. ;
  26. ; Protocol name the rule handles. Can be either TCP or UDP.
  27. ; Protocol: TCP
  28. ;
  29. ; Port number the rule handles. You can specify either a single port number, several port numbers 
  30. ; sepatrated by commas, port range, or a number of ranges.
  31. ; E.g: 110, 80-83, 225-228, 118
  32. ; RemotePort: 80-83
  33. ;
  34. ; Communication direction the rule handles. Can be either Inbound for incoming port connections or
  35. ; Outbound for outgoing ones.
  36. ; Direction: Outbound
  37. ;
  38. ; Response action proto. Lists actions that Outpost Firewall takes when the rule is matched, that is
  39. ; communication is attempted throught the specified protocol, port and direction.
  40. ; Can be one or combination of the following commands:
  41. ;
  42. ; AllowIt Allow communication.
  43. ; ActivateSI Activate the Stateful Inspection mode for this connection.
  44. ; ReportIt Report the connection attempt to the user and write an event log entry.
  45. ; BlockIt Block communication
  46. ; 
  47. ; NOTE. Do not specify AllowIt and BlockIt commands simultaneously for the same rule.
  48. ;
  49. ; AllowIt
  50.  
  51.  
  52. ; Global
  53.  
  54. [Allow Ident]
  55. DefaultState: 1
  56. RuleName: Allow Ident
  57. Protocol: TCP
  58. LocalPort: 113
  59. Direction: Inbound
  60. AllowIt
  61.  
  62. [Allow DCOM]
  63. DefaultState: 1
  64. RuleName: Allow DCOM Client
  65. Protocol: TCP
  66. RemotePort: 135
  67. Direction: Outbound
  68. AllowIt
  69.  
  70. [Allow LDAP]
  71. DefaultState: 1
  72. RuleName: Allow LDAP Client
  73. Protocol: TCP
  74. RemotePort: 3268, 3269, 389
  75. Direction: Outbound
  76. AllowIt
  77.  
  78. ; General
  79.  
  80. [E-Mail Client]
  81. DefaultState: 1
  82. RuleName: Send mail by Default E-Mail Client
  83. Protocol: TCP
  84. RemotePort: 25
  85. Direction: Outbound
  86. AllowIt
  87.  
  88. DefaultState: 1
  89. RuleName: Read News By Default E-Mail Client
  90. Protocol: TCP
  91. RemotePort: 119
  92. Direction: Outbound
  93. AllowIt
  94.  
  95. DefaultState: 1
  96. RuleName: Receive mail by Default E-Mail Client
  97. Protocol: TCP
  98. RemotePort: 110, 995
  99. Direction: Outbound
  100. AllowIt
  101.  
  102. DefaultState: 1
  103. RuleName: Default E-Mail Client IMAP connection
  104. Protocol: TCP
  105. RemotePort: 143
  106. Direction: Outbound
  107. AllowIt
  108.  
  109. [Browser]
  110. DefaultState: 1
  111. RuleName: Browser HTTP connection
  112. Protocol: TCP
  113. RemotePort: 80-83
  114. Direction: Outbound
  115. AllowIt
  116.  
  117. DefaultState: 1
  118. RuleName: Browser HTTPS connection
  119. Protocol: TCP
  120. RemotePort: 443
  121. Direction: Outbound
  122. AllowIt
  123.  
  124. DefaultState: 1
  125. RuleName: Browser SOCKS connection
  126. Protocol: TCP
  127. RemotePort: 1080
  128. Direction: Outbound
  129. AllowIt
  130.  
  131. DefaultState: 1
  132. RuleName: Browser PROXY connection
  133. Protocol: TCP
  134. RemotePort: 3128, 8080, 8081, 8088
  135. Direction: Outbound
  136. AllowIt
  137.  
  138. DefaultState: 1
  139. RuleName: Browser DCOM connection
  140. Protocol: TCP
  141. RemotePort: 135
  142. Direction: Outbound
  143. AllowIt
  144.  
  145. DefaultState: 1
  146. RuleName: Browser FTP connection
  147. Protocol: TCP
  148. RemotePort: 21
  149. Direction: Outbound
  150. ActivateSI AlgFtp
  151. AllowIt
  152.  
  153. [Download Manager]
  154. DefaultState: 1
  155. RuleName: Download Manager HTTP connection
  156. Protocol: TCP
  157. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  158. Direction: Outbound
  159. AllowIt
  160.  
  161. DefaultState: 1
  162. RuleName: Download Manager FTP connection
  163. Protocol: TCP
  164. RemotePort: 21
  165. Direction: Outbound
  166. ActivateSI AlgFtp
  167. AllowIt
  168.  
  169. [FTP Client]
  170. DefaultState: 1
  171. RuleName: FTP connection
  172. Protocol: TCP
  173. RemotePort: 21
  174. Direction: Outbound
  175. ActivateSI AlgFtp
  176. AllowIt
  177.  
  178. [Telnet Client]
  179. DefaultState: 1
  180. RuleName: Telnet connection
  181. Protocol: TCP
  182. RemotePort: 23
  183. Direction: Outbound
  184. AllowIt
  185.  
  186. DefaultState: 1
  187. RuleName: Secure Telnet connection
  188. Protocol: TCP
  189. RemotePort: 22
  190. Direction: Outbound
  191. AllowIt
  192.  
  193. [Time Synchronizer]
  194. DefaultState: 1
  195. RuleName: Time Synchronizer connection
  196. Protocol: UDP
  197. RemotePort: 123
  198. AllowIt
  199.  
  200. DefaultState: 1
  201. RuleName: Time Synchronizer connection
  202. Protocol: UDP
  203. RemotePort: 37
  204. AllowIt
  205.  
  206. DefaultState: 1
  207. RuleName: Time Synchronizer connection
  208. Protocol: TCP
  209. RemotePort: 37
  210. Direction: Outbound
  211. AllowIt
  212.  
  213. DefaultState: 1
  214. RuleName: Time Synchronizer connection
  215. Protocol: TCP
  216. RemotePort: 13
  217. Direction: Outbound
  218. AllowIt
  219.  
  220. [Web Server]
  221. DefaultState: 1
  222. RuleName: Inbound HTTP connection
  223. Protocol: TCP
  224. LocalPort: 80
  225. Direction: Inbound
  226. AllowIt
  227.  
  228. DefaultState: 1
  229. RuleName: Inbound HTTPS connection
  230. Protocol: TCP
  231. LocalPort: 443
  232. Direction: Inbound
  233. AllowIt
  234.  
  235. ; Windows services
  236.  
  237. [Microsoft ICS Manager]
  238. VisibleState: 0
  239. Exe:
  240. Microsoft ICS Manager, icsmgr.exe
  241. DefaultState: 1
  242. RuleName: Microsoft ICS Manager DNS Resolving
  243. Protocol: UDP
  244. RemotePort: 53
  245. RemoteHost: 192.168.*.*
  246. AllowIt
  247.  
  248. DefaultState: 1
  249. RuleName: Microsoft ICS Manager connection
  250. Protocol: UDP
  251. RemotePort: 67
  252. RemoteHost: 192.168.*.*
  253. AllowIt
  254.  
  255. [Microsoft ActiveSync]
  256. VisibleState: 0
  257. Exe:
  258. Microsoft ActiveSync, wcescomm.exe
  259. DefaultState: 1
  260. RuleName: Send mail by Microsoft ActiveSync
  261. Protocol: TCP
  262. RemotePort: 25
  263. Direction: Outbound
  264. AllowIt
  265.  
  266. DefaultState: 1
  267. RuleName: Receive mail by Microsoft ActiveSync
  268. Protocol: TCP
  269. RemotePort: 110, 995
  270. Direction: Outbound
  271. AllowIt
  272.  
  273. DefaultState: 1
  274. RuleName: Microsoft ActiveSync IMAP connection
  275. Protocol: TCP
  276. RemotePort: 143
  277. Direction: Outbound
  278. AllowIt
  279.  
  280. DefaultState: 1
  281. RuleName: Microsoft ActiveSync HTTP connection
  282. Protocol: TCP
  283. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  284. Direction: Outbound
  285. AllowIt
  286.  
  287. [Generic Host Process]
  288. VisibleState: 0
  289. Exe:
  290. Generic Host Process, svchost.exe
  291. DefaultState: 1
  292. RuleName: DHCP Service
  293. Protocol: UDP
  294. LocalPort: 68
  295. RemotePort: 67
  296. AllowIt
  297.  
  298. DefaultState: 1
  299. RuleName: DNS Service UDP connection
  300. Protocol: UDP
  301. LocalPort: 53
  302. AllowIt
  303. ActivateSI
  304.  
  305. DefaultState: 1
  306. RuleName: DNS Service TCP connection
  307. Protocol: TCP
  308. RemotePort: 53
  309. Direction: Outbound
  310. AllowIt
  311.  
  312. DefaultState: 1
  313. RuleName: DCOM Service TCP connection
  314. Protocol: TCP
  315. RemotePort: 135
  316. Direction: Outbound
  317. AllowIt
  318.  
  319. DefaultState: 0
  320. RuleName: Block Incoming DCOM
  321. Protocol: UDP
  322. LocalPort: 1025-1030
  323. Direction: Inbound
  324. BlockIt
  325.  
  326. DefaultState: 1
  327. RuleName: HTTP connection
  328. Protocol: TCP
  329. RemotePort: 80
  330. Direction: Outbound
  331. AllowIt
  332.  
  333. DefaultState: 1
  334. RuleName: HTTPS connection
  335. Protocol: TCP
  336. RemotePort: 443
  337. Direction: Outbound
  338. AllowIt
  339.  
  340. DefaultState: 1
  341. RuleName: Time Synchronizer connection
  342. Protocol: UDP
  343. RemotePort: 123
  344. AllowIt
  345.  
  346. DefaultState: 1
  347. RuleName: "SSDP Discovery Service" and "UPnP device Host" services
  348. Protocol: UDP
  349. RemotePort: 1900
  350. AllowIt
  351.  
  352. DefaultState: 1
  353. RuleName: "SSDP Discovery Service" and "UPnP device Host" services
  354. Protocol: TCP
  355. Direction: Outbound
  356. RemotePort: 2869
  357. AllowIt
  358.  
  359. DefaultState: 1
  360. RuleName: "SSDP Discovery Service" and "UPnP device Host" services
  361. Protocol: UDP
  362. LocalHost: 239.255.255.250
  363. LocalPort: 1900
  364. AllowIt
  365.  
  366. DefaultState: 1
  367. RuleName: SSDP legacy event notification
  368. Protocol: TCP
  369. RemotePort: 5000
  370. Direction: Outbound
  371. AllowIt
  372.  
  373. DefaultState: 1
  374. RuleName: Microsoft Remote Desktop TCP connection
  375. Protocol: TCP
  376. RemotePort: 3389
  377. Direction: Inbound
  378. AllowIt
  379.  
  380. DefaultState: 1
  381. RuleName: Generic Host Process LDAP connection
  382. Protocol: TCP
  383. RemotePort: 3268, 389
  384. Direction: Outbound
  385. AllowIt
  386.  
  387. [Microsoft ALG Service] 
  388. VisibleState: 0
  389. Group: Auto
  390. Exe:
  391. Microsoft Application Layer Gateway Service, alg.exe
  392. RuleName: Allow ALG Redirect
  393. Protocol: TCP
  394. Direction: Inbound
  395. ActivateSI Invert
  396. AllowIt
  397.  
  398. DefaultState: 1
  399. RuleName: Microsoft Application Layer Gateway Service connection
  400. Protocol: TCP
  401. RemotePort: 21
  402. Direction: Outbound
  403. ActivateSI AlgFtp
  404. AllowIt
  405.  
  406. [Microsoft Application Error Reporting]
  407. VisibleState: 0
  408. Exe:
  409. Microsoft Application Error Reporting, dw.exe
  410. Microsoft Application Error Reporting, dwwin.exe
  411. DefaultState: 1
  412. RuleName: Microsoft Application Error Reporting HTTP connection
  413. Protocol: TCP
  414. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  415. Direction: Outbound
  416. AllowIt
  417.  
  418. [Microsoft Registration Wizard]
  419. VisibleState: 0
  420. Exe:
  421. Microsoft Registration Wizard, regwiz.exe
  422. DefaultState: 1
  423. RuleName: Microsoft Registration Wizard HTTP connection
  424. Protocol: TCP
  425. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  426. Direction: Outbound
  427. AllowIt
  428.  
  429. [Microsoft RDP CIip Monitor]
  430. VisibleState: 0
  431. Exe:
  432. Microsoft RDP CIip Monitor, rdpclip.exe
  433. DefaultState: 1
  434. RuleName: Microsoft RDP CIip Monitor TCP connection
  435. Protocol: TCP
  436. RemotePort: 3389
  437. Direction: Outbound
  438. AllowIt
  439.  
  440. DefaultState: 1
  441. RuleName: Microsoft RDP CIip Monitor UDP connection
  442. Protocol: UDP
  443. RemotePort: 3389
  444. AllowIt
  445.  
  446. [Microsoft Remote Desktop]
  447. VisibleState: 0
  448. Exe:
  449. Microsoft Remote Desktop, mstsc.exe
  450. DefaultState: 1
  451. RuleName: Microsoft Remote Desktop TCP connection
  452. Protocol: TCP
  453. RemotePort: 3389
  454. Direction: Outbound
  455. AllowIt
  456.  
  457. DefaultState: 1
  458. RuleName: Microsoft Remote Desktop UDP connection
  459. Protocol: UDP
  460. RemotePort: 3389
  461. AllowIt
  462.  
  463. [Terminal Services Client]
  464. VisibleState: 0
  465. Exe:
  466. Terminal Services Client, mstsc.exe
  467. DefaultState: 1
  468. RuleName: Terminal Services Client TCP connection
  469. Protocol: TCP
  470. RemotePort: 3389
  471. Direction: Outbound
  472. AllowIt
  473.  
  474. DefaultState: 1
  475. RuleName: Terminal Services Client UDP connection
  476. Protocol: UDP
  477. RemotePort: 3389
  478. AllowIt
  479.  
  480. [Microsoft Remote Desktop Help Session Manager]
  481. VisibleState: 0
  482. Exe:
  483. Microsoft Remote Desktop Help Session Manager, sessmgr.exe
  484. DefaultState: 1
  485. RuleName: Microsoft Remote Desktop Help Session Manager connection
  486. Protocol: UDP
  487. RemotePort: 1900, 2234
  488. AllowIt
  489.  
  490. [Microsoft Synchronization Manager]
  491. VisibleState: 0
  492. Exe:
  493. Microsoft Synchronization Manager, mobsync.exe
  494. DefaultState: 1
  495. RuleName: Microsoft Synchronization Manager HTTP connection
  496. Protocol: TCP
  497. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  498. Direction: Outbound
  499. AllowIt
  500.  
  501. [Microsoft Windows AutoUpdate]
  502. VisibleState: 0
  503. Exe:
  504. Microsoft Windows AutoUpdate, wuauclt.exe
  505. DefaultState: 1
  506. RuleName: Microsoft Windows AutoUpdate HTTP connection
  507. Protocol: TCP
  508. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  509. Direction: Outbound
  510. AllowIt
  511.  
  512. [Run a DLL as an App]
  513. VisibleState: 0
  514. Exe:
  515. Run a DLL as an App, rundll32.exe
  516. DefaultState: 1
  517. RuleName: "SSDP Discovery Service" and "UPnP device Host" services
  518. Protocol: UDP
  519. RemotePort: 1900
  520. RemoteHost: 239.255.255.250
  521. AllowIt
  522.  
  523. DefaultState: 1
  524. RuleName: "SSDP Discovery Service" and "UPnP device Host" services
  525. Protocol: TCP
  526. RemotePort: 5000
  527. RemoteHost: 239.255.255.250
  528. Direction: Outbound
  529. AllowIt
  530.  
  531. DefaultState: 1
  532. RuleName: ICS TCP Connection
  533. Protocol: TCP
  534. LocalPort: 1000-4000
  535. Direction: Outbound
  536. AllowIt
  537.  
  538. DefaultState: 1
  539. RuleName: ICS UDP Connection
  540. Protocol: UDP
  541. LocalPort: 1000-4000
  542. AllowIt
  543.  
  544. [SSDP Service]
  545. VisibleState: 0
  546. Exe:
  547. SSDP Service, ssdpsrv.exe
  548. DefaultState: 1
  549. RuleName: ICS TCP Connection
  550. Protocol: TCP
  551. LocalPort: 1000-4000
  552. Direction: Outbound
  553. AllowIt
  554.  
  555. DefaultState: 1
  556. RuleName: ICS UDP Connection
  557. Protocol: UDP
  558. LocalPort: 1000-4000
  559. AllowIt
  560.  
  561. ; E-Mail
  562.  
  563. [Foxmail]
  564. VisibleState: 0
  565. Exe:
  566. Foxmail, foxmail.exe
  567. Foxmail Hotmail Proxy, foxhot.exe
  568. DefaultState: 1
  569. RuleName: Send mail by Foxmail
  570. Protocol: TCP
  571. RemotePort: 25
  572. Direction: Outbound
  573. AllowIt
  574.  
  575. DefaultState: 1
  576. RuleName: Receive mail by Foxmail
  577. Protocol: TCP
  578. RemotePort: 110, 995
  579. Direction: Outbound
  580. AllowIt
  581.  
  582. DefaultState: 1
  583. RuleName: Foxmail HTTP connection
  584. Protocol: TCP
  585. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  586. Direction: Outbound
  587. AllowIt
  588.  
  589. [IncrediMail]
  590. VisibleState: 0
  591. Exe:
  592. IncrediMail, incmail.exe
  593. DefaultState: 1
  594. RuleName: Send mail by IncrediMail
  595. Protocol: TCP
  596. RemotePort: 25
  597. Direction: Outbound
  598. AllowIt
  599.  
  600. DefaultState: 1
  601. RuleName: Receive mail by IncrediMail
  602. Protocol: TCP
  603. RemotePort: 110, 995
  604. Direction: Outbound
  605. AllowIt
  606.  
  607. DefaultState: 1
  608. RuleName: IncrediMail IMAP connection
  609. Protocol: TCP
  610. RemotePort: 143
  611. Direction: Outbound
  612. AllowIt
  613.  
  614. DefaultState: 1
  615. RuleName: IncrediMail HTTP connection
  616. Protocol: TCP
  617. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  618. Direction: Outbound
  619. AllowIt
  620.  
  621. [Outlook Express]
  622. VisibleState: 0
  623. Exe:
  624. Outlook Express, msimn.exe
  625. DefaultState: 1
  626. RuleName: Send mail by Outlook Express
  627. Protocol: TCP
  628. RemotePort: 25
  629. Direction: Outbound
  630. AllowIt
  631.  
  632. DefaultState: 1
  633. RuleName: Outlook Express NNTP connection
  634. Protocol: TCP
  635. RemotePort: 119
  636. Direction: Outbound
  637. AllowIt
  638.  
  639. DefaultState: 1
  640. RuleName: Receive mail by Outlook Express
  641. Protocol: TCP
  642. RemotePort: 110, 995
  643. Direction: Outbound
  644. AllowIt
  645.  
  646. DefaultState: 1
  647. RuleName: Outlook Express IMAP connection
  648. Protocol: TCP
  649. RemotePort: 143
  650. Direction: Outbound
  651. AllowIt
  652.  
  653. DefaultState: 1
  654. RuleName: Outlook Express HTTP connection
  655. Protocol: TCP
  656. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  657. Direction: Outbound
  658. AllowIt
  659.  
  660. DefaultState: 1
  661. RuleName: Outlook Express LDAP connection
  662. Protocol: TCP
  663. RemotePort: 3268, 389
  664. Direction: Outbound
  665. AllowIt
  666.  
  667. [Microsoft Outlook]
  668. VisibleState: 0
  669. Exe:
  670. Microsoft Outlook, outlook.exe
  671. DefaultState: 1
  672. RuleName: Send mail by Microsoft Outlook
  673. Protocol: TCP
  674. RemotePort: 25
  675. Direction: Outbound
  676. AllowIt
  677.  
  678. DefaultState: 1
  679. RuleName: Microsoft Outlook NNTP connection
  680. Protocol: TCP
  681. RemotePort: 119
  682. Direction: Outbound
  683. AllowIt
  684.  
  685. DefaultState: 1
  686. RuleName: Receive mail by Microsoft Outlook
  687. Protocol: TCP
  688. RemotePort: 110, 995
  689. Direction: Outbound
  690. AllowIt
  691.  
  692. DefaultState: 1
  693. RuleName: Microsoft Outlook IMAP connection
  694. Protocol: TCP
  695. RemotePort: 143
  696. Direction: Outbound
  697. AllowIt
  698.  
  699. DefaultState: 1
  700. RuleName: Microsoft Outlook HTTP connection
  701. Protocol: TCP
  702. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  703. Direction: Outbound
  704. AllowIt
  705.  
  706. DefaultState: 1
  707. RuleName: Microsoft Outlook LDAP connection
  708. Protocol: TCP
  709. RemotePort: 3268, 389
  710. Direction: Outbound
  711. AllowIt
  712.  
  713. [Pegasus Mail]
  714. VisibleState: 0
  715. Exe:
  716. Pegasus Mail, winpm-32.exe
  717. DefaultState: 1
  718. RuleName: Send mail by Pegasus Mail
  719. Protocol: TCP
  720. RemotePort: 25
  721. Direction: Outbound
  722. AllowIt
  723.  
  724. DefaultState: 1
  725. RuleName: Receive mail by Pegasus Mail
  726. Protocol: TCP
  727. RemotePort: 110, 995
  728. Direction: Outbound
  729. AllowIt
  730.  
  731. DefaultState: 1
  732. RuleName: Pegasus Mail IMAP connection
  733. Protocol: TCP
  734. RemotePort: 143
  735. Direction: Outbound
  736. AllowIt
  737.  
  738. DefaultState: 1
  739. RuleName: Pegasus Mail HTTP connection
  740. Protocol: TCP
  741. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  742. Direction: Outbound
  743. AllowIt
  744.  
  745. [The BAT]
  746. VisibleState: 0
  747. Exe:
  748. The BAT, thebat.exe
  749. DefaultState: 1
  750. RuleName: Send mail by The BAT
  751. Protocol: TCP
  752. RemotePort: 25
  753. Direction: Outbound
  754. AllowIt
  755.  
  756. DefaultState: 1
  757. RuleName: Read News By The BAT
  758. Protocol: TCP
  759. RemotePort: 119
  760. Direction: Outbound
  761. AllowIt
  762.  
  763. DefaultState: 1
  764. RuleName: Receive mail by The BAT
  765. Protocol: TCP
  766. RemotePort: 110, 995
  767. Direction: Outbound
  768. AllowIt
  769.  
  770. DefaultState: 1
  771. RuleName: The BAT IMAP connection
  772. Protocol: TCP
  773. RemotePort: 143
  774. Direction: Outbound
  775. AllowIt
  776.  
  777. DefaultState: 1
  778. RuleName: The Bat LDAP connection
  779. Protocol: TCP
  780. RemotePort: 3268, 389
  781. Direction: Outbound
  782. AllowIt
  783.  
  784. [Express Plus]
  785. VisibleState: 0
  786. Exe:
  787. Express Plus, expressplus.exe
  788. DefaultState: 1
  789. RuleName: Send mail by Express Plus
  790. Protocol: TCP
  791. RemotePort: 25
  792. Direction: Outbound
  793. AllowIt
  794.  
  795. DefaultState: 1
  796. RuleName: Receive mail by Express Plus
  797. Protocol: TCP
  798. RemotePort: 110, 995
  799. Direction: Outbound
  800. AllowIt
  801.  
  802. DefaultState: 1
  803. RuleName: Express Plus IMAP connection
  804. Protocol: TCP
  805. RemotePort: 143
  806. Direction: Outbound
  807. AllowIt
  808.  
  809. DefaultState: 1
  810. RuleName: Express Plus HTTP connection
  811. Protocol: TCP
  812. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  813. Direction: Outbound
  814. AllowIt
  815.  
  816. [Becky!]
  817. VisibleState: 0
  818. Exe:
  819. Becky!, b2.exe
  820. DefaultState: 1
  821. RuleName: Send mail by Becky!
  822. Protocol: TCP
  823. RemotePort: 25
  824. Direction: Outbound
  825. AllowIt
  826.  
  827. DefaultState: 1
  828. RuleName: Read News By Becky!
  829. Protocol: TCP
  830. RemotePort: 119
  831. Direction: Outbound
  832. AllowIt
  833.  
  834. DefaultState: 1
  835. RuleName: Receive mail by Becky!
  836. Protocol: TCP
  837. RemotePort: 110, 995
  838. Direction: Outbound
  839. AllowIt
  840.  
  841. DefaultState: 1
  842. RuleName: Becky! IMAP connection
  843. Protocol: TCP
  844. RemotePort: 143
  845. Direction: Outbound
  846. AllowIt
  847.  
  848. [Eudora]
  849. VisibleState: 0
  850. Exe:
  851. Eudora, eudora.exe
  852. DefaultState: 1
  853. RuleName: Send mail by Eudora
  854. Protocol: TCP
  855. RemotePort: 25
  856. Direction: Outbound
  857. AllowIt
  858.  
  859. DefaultState: 1
  860. RuleName: Receive mail by Eudora
  861. Protocol: TCP
  862. RemotePort: 110, 995
  863. Direction: Outbound
  864. AllowIt
  865.  
  866. DefaultState: 1
  867. RuleName: Eudora IMAP connection
  868. Protocol: TCP
  869. RemotePort: 143
  870. Direction: Outbound
  871. AllowIt
  872.  
  873. DefaultState: 1
  874. RuleName: Eudora HTTP connection
  875. Protocol: TCP
  876. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  877. Direction: Outbound
  878. AllowIt
  879.  
  880. [Calypso]
  881. VisibleState: 0
  882. Exe:
  883. Calypso, calypso.exe
  884. DefaultState: 1
  885. RuleName: Send mail by Calypso
  886. Protocol: TCP
  887. RemotePort: 25
  888. Direction: Outbound
  889. AllowIt
  890.  
  891. DefaultState: 1
  892. RuleName: Receive mail by Calypso
  893. Protocol: TCP
  894. RemotePort: 110, 995
  895. Direction: Outbound
  896. AllowIt
  897.  
  898. DefaultState: 1
  899. RuleName: Calypso LDAP connection
  900. Protocol: TCP
  901. RemotePort: 3268, 389
  902. Direction: Outbound
  903. AllowIt
  904.  
  905. DefaultState: 1
  906. RuleName: Calypso HTTP connection
  907. Protocol: TCP
  908. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  909. Direction: Outbound
  910. AllowIt
  911.  
  912. [Mozilla Thunderbird]
  913. VisibleState: 0
  914. Exe:
  915. Mozilla Thunderbird, thunderbird.exe
  916. DefaultState: 1
  917. RuleName: Send mail by Mozilla Thunderbird
  918. Protocol: TCP
  919. RemotePort: 25
  920. Direction: Outbound
  921. AllowIt
  922.  
  923. DefaultState: 1
  924. RuleName: Receive mail by Mozilla Thunderbird
  925. Protocol: TCP
  926. RemotePort: 110, 995
  927. Direction: Outbound
  928. AllowIt
  929.  
  930. DefaultState: 1
  931. RuleName: Mozilla Thunderbird IMAP connection
  932. Protocol: TCP
  933. RemotePort: 143
  934. Direction: Outbound
  935. AllowIt
  936.  
  937. DefaultState: 1
  938. RuleName: Mozilla Thunderbird HTTP connection
  939. Protocol: TCP
  940. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  941. Direction: Outbound
  942. AllowIt
  943.  
  944. DefaultState: 1
  945. RuleName: Mozilla Thunderbird LocalHost connection
  946. Protocol: TCP
  947. RemoteHost: 127.0.0.1
  948. Direction: Outbound
  949. AllowIt
  950.  
  951. DefaultState: 1
  952. RuleName: Read News By Mozilla Thunderbird
  953. Protocol: TCP
  954. RemotePort: 119
  955. Direction: Outbound
  956. AllowIt
  957.  
  958. [YahooPOPs!]
  959. VisibleState: 0
  960. Exe:
  961. YahooPOPs!, yahoopops.exe
  962. DefaultState: 1
  963. RuleName: Receive mail by YahooPOPs!
  964. Protocol: TCP
  965. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  966. Direction: Outbound
  967. AllowIt
  968.  
  969. [Yahta]
  970. VisibleState: 0
  971. Exe:
  972. Yahta, yahta.exe
  973. DefaultState: 1
  974. RuleName: Receive mail by Yahta
  975. Protocol: TCP
  976. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  977. Direction: Outbound
  978. AllowIt
  979.  
  980. [AD MailBox Manager]
  981. VisibleState: 0
  982. Exe:
  983. AD MailBox Manager, mbm.exe
  984. DefaultState: 1
  985. RuleName: AD MailBox Manager connection
  986. Protocol: TCP
  987. RemotePort: 110
  988. Direction: Outbound
  989. AllowIt
  990.  
  991. [Magic Mail Monitor]
  992. VisibleState: 0
  993. Exe:
  994. Magic Mail Monitor, magic.exe
  995. DefaultState: 1
  996. RuleName: Magic Mail Monitor connection
  997. Protocol: TCP
  998. RemotePort: 110
  999. Direction: Outbound
  1000. AllowIt
  1001.  
  1002. [MailBell]
  1003. VisibleState: 0
  1004. Exe:
  1005. MailBell, mailbell.exe
  1006. DefaultState: 1
  1007. RuleName: MailBell connection
  1008. Protocol: TCP
  1009. RemotePort: 110
  1010. Direction: Outbound
  1011. AllowIt
  1012.  
  1013. [Mail Navigator]
  1014. VisibleState: 0
  1015. Exe:
  1016. Mail Navigator, connect.exe
  1017. DefaultState: 1
  1018. RuleName: Receive mail by Mail Navigator
  1019. Protocol: TCP
  1020. RemotePort: 110
  1021. Direction: Outbound
  1022. AllowIt
  1023.  
  1024. DefaultState: 1
  1025. RuleName: Send mail by Mail Navigator
  1026. Protocol: TCP
  1027. RemotePort: 25
  1028. Direction: Outbound
  1029. AllowIt
  1030.  
  1031. [Mail.Ru Agent]
  1032. VisibleState: 0
  1033. Exe:
  1034. Mail.Ru Agent, mra.exe
  1035. DefaultState: 1
  1036. RuleName: Mail.Ru Agent HTTP Connection
  1037. Protocol: TCP
  1038. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  1039. Direction: Outbound
  1040. AllowIt
  1041.  
  1042. DefaultState: 1
  1043. RuleName: Mail.Ru Agent connection
  1044. Protocol: TCP
  1045. RemotePort: 2041, 2042
  1046. Direction: Outbound
  1047. AllowIt
  1048.  
  1049. ; Browser
  1050.  
  1051. [Windows Explorer]
  1052. VisibleState: 0
  1053. Exe:
  1054. Windows Explorer, explorer.exe
  1055. DefaultState: 0
  1056. RuleName: Windows Explorer HTTP connection
  1057. Protocol: TCP
  1058. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  1059. Direction: Outbound
  1060. AllowIt
  1061.  
  1062. DefaultState: 0
  1063. RuleName: Windows Explorer FTP connection
  1064. Protocol: TCP
  1065. RemotePort: 21
  1066. Direction: Outbound
  1067. ActivateSI AlgFtp 
  1068. AllowIt
  1069.  
  1070. [Amaya]
  1071. VisibleState: 0
  1072. Exe:
  1073. Amaya, amaya.exe
  1074. DefaultState: 1
  1075. RuleName: Amaya HTTP connection
  1076. Protocol: TCP
  1077. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  1078. Direction: Outbound
  1079. AllowIt
  1080.  
  1081. [Avant Browser]
  1082. VisibleState: 0
  1083. Exe:
  1084. Avant Browser, avant.exe
  1085. DefaultState: 1
  1086. RuleName: Avant Browser HTTP connection
  1087. Protocol: TCP
  1088. RemotePort:  80-83
  1089. Direction: Outbound
  1090. AllowIt
  1091.  
  1092. DefaultState: 1
  1093. RuleName: Avant Browser HTTPS connection
  1094. Protocol: TCP
  1095. RemotePort: 443
  1096. Direction: Outbound
  1097. AllowIt
  1098.  
  1099. DefaultState: 1
  1100. RuleName: Avant Browser SOCKS connection
  1101. Protocol: TCP
  1102. RemotePort: 1080
  1103. Direction: Outbound
  1104. AllowIt
  1105.  
  1106. DefaultState: 1
  1107. RuleName: Avant Browser PROXY connection
  1108. Protocol: TCP
  1109. RemotePort: 3128, 8080, 8081, 8088
  1110. Direction: Outbound
  1111. AllowIt
  1112.  
  1113. DefaultState: 1
  1114. RuleName: Avant Browser FTP connection
  1115. Protocol: TCP
  1116. RemotePort: 21
  1117. Direction: Outbound
  1118. ActivateSI AlgFtp 
  1119. AllowIt
  1120.  
  1121. [Internet Explorer]
  1122. VisibleState: 0
  1123. Exe:
  1124. Internet Explorer, iexplore.exe
  1125. DefaultState: 1
  1126. RuleName: Internet Explorer HTTP connection
  1127. Protocol: TCP
  1128. RemotePort: 80-83
  1129. Direction: Outbound
  1130. AllowIt
  1131.  
  1132. DefaultState: 1
  1133. RuleName: Internet Explorer HTTPS connection
  1134. Protocol: TCP
  1135. RemotePort: 443
  1136. Direction: Outbound
  1137. AllowIt
  1138.  
  1139. DefaultState: 1
  1140. RuleName: Internet Explorer SOCKS connection
  1141. Protocol: TCP
  1142. RemotePort: 1080
  1143. Direction: Outbound
  1144. AllowIt
  1145.  
  1146. DefaultState: 1
  1147. RuleName: Internet Explorer PROXY connection
  1148. Protocol: TCP
  1149. RemotePort: 3128, 8080, 8081, 8088
  1150. Direction: Outbound
  1151. AllowIt
  1152.  
  1153. DefaultState: 1
  1154. RuleName: Internet Explorer Gopher connection
  1155. Protocol: TCP
  1156. RemotePort: 70
  1157. Direction: Outbound
  1158. AllowIt
  1159.  
  1160. DefaultState: 1
  1161. RuleName: Internet Explorer Web Folders
  1162. Protocol: TCP
  1163. LocalPort: 1375
  1164. Direction: Inbound
  1165. AllowIt
  1166.  
  1167. DefaultState: 1
  1168. RuleName: Internet Explorer Web Folders
  1169. Protocol: UDP
  1170. LocalPort: 1040-1050
  1171. AllowIt
  1172.  
  1173. DefaultState: 1
  1174. RuleName: Internet Explorer FTP connection
  1175. Protocol: TCP
  1176. RemotePort: 21
  1177. Direction: Outbound
  1178. ActivateSI AlgFtp 
  1179. AllowIt
  1180.  
  1181. DefaultState: 1
  1182. RuleName: Internet Explorer show video
  1183. Protocol: TCP
  1184. RemotePort: 554
  1185. Direction: Outbound
  1186. AllowIt
  1187.  
  1188. [Netscape Navigator]
  1189. VisibleState: 0
  1190. Exe:
  1191. Netscape Navigator, netscape.exe
  1192. Netscape Navigator, netscp.exe
  1193. DefaultState: 1
  1194. RuleName: Netscape HTTP connection
  1195. Protocol: TCP
  1196. RemotePort: 80-83
  1197. Direction: Outbound
  1198. AllowIt
  1199.  
  1200. DefaultState: 1
  1201. RuleName: Netscape HTTPS connection
  1202. Protocol: TCP
  1203. RemotePort: 443
  1204. Direction: Outbound
  1205. AllowIt
  1206.  
  1207. DefaultState: 1
  1208. RuleName: Netscape SOCKS connection
  1209. Protocol: TCP
  1210. RemotePort: 1080
  1211. Direction: Outbound
  1212. AllowIt
  1213.  
  1214. DefaultState: 1
  1215. RuleName: Netscape PROXY connection
  1216. Protocol: TCP
  1217. RemotePort: 3128, 8080, 8081, 8088
  1218. Direction: Outbound
  1219. AllowIt
  1220.  
  1221. DefaultState: 1
  1222. RuleName: Netscape Messenger Send Mail
  1223. Protocol: TCP
  1224. RemotePort: 25
  1225. Direction: Outbound
  1226. AllowIt
  1227.  
  1228. DefaultState: 1
  1229. RuleName: Netscape Messenger Read News
  1230. Protocol: TCP
  1231. RemotePort: 119
  1232. Direction: Outbound
  1233. AllowIt
  1234.  
  1235. DefaultState: 1
  1236. RuleName: Netscape Messenger Receive Mail
  1237. Protocol: TCP
  1238. RemotePort: 110
  1239. Direction: Outbound
  1240. AllowIt
  1241.  
  1242. DefaultState: 1
  1243. RuleName: Netscape Messenger IMAP connection
  1244. Protocol: TCP
  1245. RemotePort: 143
  1246. Direction: Outbound
  1247. AllowIt
  1248.  
  1249. DefaultState: 1
  1250. RuleName: Netscape FTP connection
  1251. Protocol: TCP
  1252. RemotePort: 21
  1253. Direction: Outbound
  1254. ActivateSI AlgFtp 
  1255. AllowIt
  1256.  
  1257. [Netscape Mail Notification]
  1258. VisibleState: 0
  1259. Exe:
  1260. Netscape Mail Notification, nsnotify.exe
  1261. DefaultState: 1
  1262. RuleName: Netscape Mail Notification
  1263. Protocol: TCP
  1264. RemotePort: 110
  1265. Direction: Outbound
  1266. AllowIt
  1267.  
  1268. [Crazy Browser]
  1269. VisibleState: 0
  1270. Exe:
  1271. Crazy Browser, crazy browser.exe
  1272. DefaultState: 1
  1273. RuleName: Crazy Browser HTTP connection
  1274. Protocol: TCP
  1275. RemotePort: 80-83
  1276. Direction: Outbound
  1277. AllowIt
  1278.  
  1279. DefaultState: 1
  1280. RuleName: Crazy Browser HTTPS connection
  1281. Protocol: TCP
  1282. RemotePort: 443
  1283. Direction: Outbound
  1284. AllowIt
  1285.  
  1286. DefaultState: 1
  1287. RuleName: Crazy Browser SOCKS connection
  1288. Protocol: TCP
  1289. RemotePort: 1080
  1290. Direction: Outbound
  1291. AllowIt
  1292.  
  1293. DefaultState: 1
  1294. RuleName: Crazy Browser PROXY connection
  1295. Protocol: TCP
  1296. RemotePort: 3128, 8080, 8081, 8088
  1297. Direction: Outbound
  1298. AllowIt
  1299.  
  1300. DefaultState: 1
  1301. RuleName: Crazy Browser Gopher connection
  1302. Protocol: TCP
  1303. RemotePort: 70
  1304. Direction: Outbound
  1305. AllowIt
  1306.  
  1307. DefaultState: 1
  1308. RuleName: Crazy Browser FTP connection
  1309. Protocol: TCP
  1310. RemotePort: 21
  1311. Direction: Outbound
  1312. ActivateSI AlgFtp 
  1313. AllowIt
  1314.  
  1315. [The Off By One Web Browser]
  1316. VisibleState: 0
  1317. Exe:
  1318. The Off By One Web Browser, ob1.exe
  1319. DefaultState: 1
  1320. RuleName: The Off By One Web Browser HTTP connection
  1321. Protocol: TCP
  1322. RemotePort: 80-83
  1323. Direction: Outbound
  1324. AllowIt
  1325.  
  1326. DefaultState: 1
  1327. RuleName: The Off By One Web Browser HTTPS connection
  1328. Protocol: TCP
  1329. RemotePort: 443
  1330. Direction: Outbound
  1331. AllowIt
  1332.  
  1333. DefaultState: 1
  1334. RuleName: The Off By One Web Browser SOCKS connection
  1335. Protocol: TCP
  1336. RemotePort: 1080
  1337. Direction: Outbound
  1338. AllowIt
  1339.  
  1340. DefaultState: 1
  1341. RuleName: The Off By One Web Browser PROXY connection
  1342. Protocol: TCP
  1343. RemotePort: 3128, 8080, 8081, 8088
  1344. Direction: Outbound
  1345. AllowIt
  1346.  
  1347. [Opera]
  1348. VisibleState: 0
  1349. Exe:
  1350. Opera, opera.exe
  1351. DefaultState: 1
  1352. RuleName: Opera HTTP connection
  1353. Protocol: TCP
  1354. RemotePort: 80-83
  1355. Direction: Outbound
  1356. AllowIt
  1357.  
  1358. DefaultState: 1
  1359. RuleName: Opera HTTPS connection
  1360. Protocol: TCP
  1361. RemotePort: 443
  1362. Direction: Outbound
  1363. AllowIt
  1364.  
  1365. DefaultState: 1
  1366. RuleName: Opera SOCKS connection
  1367. Protocol: TCP
  1368. RemotePort: 1080
  1369. Direction: Outbound
  1370. AllowIt
  1371.  
  1372. DefaultState: 1
  1373. RuleName: Opera PROXY connection
  1374. Protocol: TCP
  1375. RemotePort: 3128, 8080, 8081, 8088
  1376. Direction: Outbound
  1377. AllowIt
  1378.  
  1379. DefaultState: 1
  1380. RuleName: Opera FTP connection
  1381. Protocol: TCP
  1382. RemotePort: 21
  1383. Direction: Outbound
  1384. ActivateSI AlgFtp 
  1385. AllowIt
  1386.  
  1387. DefaultState: 1
  1388. RuleName: Opera NNTP connection
  1389. Protocol: TCP
  1390. RemotePort: 119
  1391. Direction: Outbound
  1392. AllowIt
  1393.  
  1394. DefaultState: 1
  1395. RuleName: Opera SMTP connection
  1396. Protocol: TCP
  1397. RemotePort: 25
  1398. Direction: Outbound
  1399. AllowIt
  1400.  
  1401. DefaultState: 1
  1402. RuleName: Opera POP3 connection
  1403. Protocol: TCP
  1404. RemotePort: 110
  1405. Direction: Outbound
  1406. AllowIt
  1407.  
  1408. [Maxthon]
  1409. VisibleState: 0
  1410. Exe:
  1411. Maxthon, Maxthon.exe
  1412. DefaultState: 1
  1413. RuleName: Maxthon HTTP connection
  1414. Protocol: TCP
  1415. RemotePort: 80-83
  1416. Direction: Outbound
  1417. AllowIt
  1418.  
  1419. DefaultState: 1
  1420. RuleName: Maxthon HTTPS connection
  1421. Protocol: TCP
  1422. RemotePort: 443
  1423. Direction: Outbound
  1424. AllowIt
  1425.  
  1426. DefaultState: 1
  1427. RuleName: Maxthon SOCKS connection
  1428. Protocol: TCP
  1429. RemotePort: 1080
  1430. Direction: Outbound
  1431. AllowIt
  1432.  
  1433. DefaultState: 1
  1434. RuleName: Maxthon PROXY connection
  1435. Protocol: TCP
  1436. RemotePort: 3128, 8080, 8081, 8088
  1437. Direction: Outbound
  1438. AllowIt
  1439.  
  1440. DefaultState: 1
  1441. RuleName: Maxthon FTP connection
  1442. Protocol: TCP
  1443. RemotePort: 21
  1444. Direction: Outbound
  1445. ActivateSI AlgFtp 
  1446. AllowIt
  1447.  
  1448. [NetCaptor]
  1449. VisibleState: 0
  1450. Exe:
  1451. NetCaptor, netcaptor.exe
  1452. DefaultState: 1
  1453. RuleName: NetCaptor HTTP connection
  1454. Protocol: TCP
  1455. RemotePort: 80-83
  1456. Direction: Outbound
  1457. AllowIt
  1458.  
  1459. DefaultState: 1
  1460. RuleName: NetCaptor HTTPS connection
  1461. Protocol: TCP
  1462. RemotePort: 443
  1463. Direction: Outbound
  1464. AllowIt
  1465.  
  1466. DefaultState: 1
  1467. RuleName: NetCaptor SOCKS connection
  1468. Protocol: TCP
  1469. RemotePort: 1080
  1470. Direction: Outbound
  1471. AllowIt
  1472.  
  1473. DefaultState: 1
  1474. RuleName: NetCaptor PROXY connection
  1475. Protocol: TCP
  1476. RemotePort: 3128, 8080, 8081, 8088
  1477. Direction: Outbound
  1478. AllowIt
  1479.  
  1480. DefaultState: 1
  1481. RuleName: NetCaptor Gopher connection
  1482. Protocol: TCP
  1483. RemotePort: 70
  1484. Direction: Outbound
  1485. AllowIt
  1486.  
  1487. DefaultState: 1
  1488. RuleName: NetCaptor Web Folders
  1489. Protocol: TCP
  1490. LocalPort: 1375
  1491. Direction: Inbound
  1492. AllowIt
  1493.  
  1494. DefaultState: 1
  1495. RuleName: NetCaptor Web Folders
  1496. Protocol: UDP
  1497. LocalPort: 1040-1050
  1498. AllowIt
  1499.  
  1500. DefaultState: 1
  1501. RuleName: NetCaptor FTP connection
  1502. Protocol: TCP
  1503. RemotePort: 21
  1504. Direction: Outbound
  1505. ActivateSI AlgFtp 
  1506. AllowIt
  1507.  
  1508. [NeoPlanet]
  1509. VisibleState: 0
  1510. Exe:
  1511. NeoPlanet, np.exe
  1512. DefaultState: 1
  1513. RuleName: NeoPlanet HTTP connection
  1514. Protocol: TCP
  1515. RemotePort: 80-83
  1516. Direction: Outbound
  1517. AllowIt
  1518.  
  1519. DefaultState: 1
  1520. RuleName: NeoPlanet HTTPS connection
  1521. Protocol: TCP
  1522. RemotePort: 443
  1523. Direction: Outbound
  1524. AllowIt
  1525.  
  1526. DefaultState: 1
  1527. RuleName: NeoPlanet SOCKS connection
  1528. Protocol: TCP
  1529. RemotePort: 1080
  1530. Direction: Outbound
  1531. AllowIt
  1532.  
  1533. DefaultState: 1
  1534. RuleName: NeoPlanet PROXY connection
  1535. Protocol: TCP
  1536. RemotePort: 3128, 8080, 8081, 8088
  1537. Direction: Outbound
  1538. AllowIt
  1539.  
  1540. DefaultState: 1
  1541. RuleName: NeoPlanet Gopher connection
  1542. Protocol: TCP
  1543. RemotePort: 70
  1544. Direction: Outbound
  1545. AllowIt
  1546.  
  1547. DefaultState: 1
  1548. RuleName: NeoPlanet Web Folders
  1549. Protocol: TCP
  1550. LocalPort: 1375
  1551. Direction: Inbound
  1552. AllowIt
  1553.  
  1554. DefaultState: 1
  1555. RuleName: NeoPlanet Web Folders
  1556. Protocol: UDP
  1557. LocalPort: 1040-1050
  1558. AllowIt
  1559.  
  1560. DefaultState: 1
  1561. RuleName: NeoPlanet FTP connection
  1562. Protocol: TCP
  1563. RemotePort: 21
  1564. Direction: Outbound
  1565. ActivateSI AlgFtp 
  1566. AllowIt
  1567.  
  1568. [Phoenix Web Browser]
  1569. VisibleState: 0
  1570. Exe:
  1571. Phoenix Web Browser, phoenix.exe
  1572. DefaultState: 1
  1573. RuleName: Phoenix Web Browser HTTP connection
  1574. Protocol: TCP
  1575. RemotePort: 80-83
  1576. Direction: Outbound
  1577. AllowIt
  1578.  
  1579. DefaultState: 1
  1580. RuleName: Phoenix Web Browser HTTPS connection
  1581. Protocol: TCP
  1582. RemotePort: 443
  1583. Direction: Outbound
  1584. AllowIt
  1585.  
  1586. DefaultState: 1
  1587. RuleName: Phoenix Web Browser SOCKS connection
  1588. Protocol: TCP
  1589. RemotePort: 1080
  1590. Direction: Outbound
  1591. AllowIt
  1592.  
  1593. DefaultState: 1
  1594. RuleName: Phoenix Web Browser PROXY connection
  1595. Protocol: TCP
  1596. RemotePort: 3128, 8080, 8081, 8088
  1597. Direction: Outbound
  1598. AllowIt
  1599.  
  1600. DefaultState: 1
  1601. RuleName: Phoenix Web Browser FTP connection
  1602. Protocol: TCP
  1603. RemotePort: 21
  1604. Direction: Outbound
  1605. ActivateSI AlgFtp 
  1606. AllowIt
  1607.  
  1608. [Mozilla Firebird]
  1609. VisibleState: 0
  1610. Exe:
  1611. Mozilla Firebird, mozillafirebird.exe
  1612. DefaultState: 1
  1613. RuleName: Mozilla Firebird HTTP connection
  1614. Protocol: TCP
  1615. RemotePort: 80-83
  1616. Direction: Outbound
  1617. AllowIt
  1618.  
  1619. DefaultState: 1
  1620. RuleName: Mozilla Firebird HTTPS connection
  1621. Protocol: TCP
  1622. RemotePort: 443
  1623. Direction: Outbound
  1624. AllowIt
  1625.  
  1626. DefaultState: 1
  1627. RuleName: Mozilla Firebird SOCKS connection
  1628. Protocol: TCP
  1629. RemotePort: 1080
  1630. Direction: Outbound
  1631. AllowIt
  1632.  
  1633. DefaultState: 1
  1634. RuleName: Mozilla Firebird PROXY connection
  1635. Protocol: TCP
  1636. RemotePort: 3128, 8080, 8081, 8088
  1637. Direction: Outbound
  1638. AllowIt
  1639.  
  1640. DefaultState: 1
  1641. RuleName: Mozilla Firebird FTP connection
  1642. Protocol: TCP
  1643. RemotePort: 21
  1644. Direction: Outbound
  1645. ActivateSI AlgFtp 
  1646. AllowIt
  1647.  
  1648. [Mozilla Firefox]
  1649. VisibleState: 0
  1650. Exe:
  1651. Mozilla Firefox, firefox.exe
  1652. DefaultState: 1
  1653. RuleName: Mozilla Firefox HTTP connection
  1654. Protocol: TCP
  1655. RemotePort: 80-83
  1656. Direction: Outbound
  1657. AllowIt
  1658.  
  1659. DefaultState: 1
  1660. RuleName: Mozilla Firefox LocalHost connection
  1661. Protocol: TCP
  1662. RemoteHost: 127.0.0.1
  1663. Direction: Outbound
  1664. AllowIt
  1665.  
  1666. DefaultState: 1
  1667. RuleName: Mozilla Firefox HTTPS connection
  1668. Protocol: TCP
  1669. RemotePort: 443
  1670. Direction: Outbound
  1671. AllowIt
  1672.  
  1673. DefaultState: 1
  1674. RuleName: Mozilla Firefox SOCKS connection
  1675. Protocol: TCP
  1676. RemotePort: 1080
  1677. Direction: Outbound
  1678. AllowIt
  1679.  
  1680. DefaultState: 1
  1681. RuleName: Mozilla Firefox PROXY connection
  1682. Protocol: TCP
  1683. RemotePort: 3128, 8080, 8081, 8088
  1684. Direction: Outbound
  1685. AllowIt
  1686.  
  1687. DefaultState: 1
  1688. RuleName: Mozilla Firefox FTP connection
  1689. Protocol: TCP
  1690. RemotePort: 21
  1691. Direction: Outbound
  1692. ActivateSI AlgFtp 
  1693. AllowIt
  1694.  
  1695. [Smart Explorer]
  1696. VisibleState: 0
  1697. Exe:
  1698. Smart Explorer, sexplorer.exe
  1699. DefaultState: 1
  1700. RuleName: Smart Explorer HTTP connection
  1701. Protocol: TCP
  1702. RemotePort: 80-83
  1703. Direction: Outbound
  1704. AllowIt
  1705.  
  1706. DefaultState: 1
  1707. RuleName: Smart Explorer HTTPS connection
  1708. Protocol: TCP
  1709. RemotePort: 443
  1710. Direction: Outbound
  1711. AllowIt
  1712.  
  1713. DefaultState: 1
  1714. RuleName: Smart Explorer SOCKS connection
  1715. Protocol: TCP
  1716. RemotePort: 1080
  1717. Direction: Outbound
  1718. AllowIt
  1719.  
  1720. DefaultState: 1
  1721. RuleName: Smart Explorer PROXY connection
  1722. Protocol: TCP
  1723. RemotePort: 3128, 8080, 8081, 8088
  1724. Direction: Outbound
  1725. AllowIt
  1726.  
  1727. DefaultState: 1
  1728. RuleName: Smart Explorer Gopher connection
  1729. Protocol: TCP
  1730. RemotePort: 70
  1731. Direction: Outbound
  1732. AllowIt
  1733.  
  1734. DefaultState: 1
  1735. RuleName: Smart Explorer Web Folders
  1736. Protocol: TCP
  1737. LocalPort: 1375
  1738. Direction: Inbound
  1739. AllowIt
  1740.  
  1741. DefaultState: 1
  1742. RuleName: Smart Explorer Web Folders
  1743. Protocol: UDP
  1744. LocalPort: 1040-1050
  1745. AllowIt
  1746.  
  1747. DefaultState: 1
  1748. RuleName: Smart Explorer FTP connection
  1749. Protocol: TCP
  1750. RemotePort: 21
  1751. Direction: Outbound
  1752. ActivateSI AlgFtp 
  1753. AllowIt
  1754.  
  1755. [Mozilla]
  1756. VisibleState: 0
  1757. Exe:
  1758. Mozilla, mozilla.exe
  1759. DefaultState: 1
  1760. RuleName: Mozilla HTTP connection
  1761. Protocol: TCP
  1762. RemotePort: 80-83
  1763. Direction: Outbound
  1764. AllowIt
  1765.  
  1766. DefaultState: 1
  1767. RuleName: Mozilla HTTPS connection
  1768. Protocol: TCP
  1769. RemotePort: 443
  1770. Direction: Outbound
  1771. AllowIt
  1772.  
  1773. DefaultState: 1
  1774. RuleName: Mozilla SOCKS connection
  1775. Protocol: TCP
  1776. RemotePort: 1080
  1777. Direction: Outbound
  1778. AllowIt
  1779.  
  1780. DefaultState: 1
  1781. RuleName: Mozilla PROXY connection
  1782. Protocol: TCP
  1783. RemotePort: 3128, 8080, 8081, 8088
  1784. Direction: Outbound
  1785. AllowIt
  1786.  
  1787. DefaultState: 1
  1788. RuleName: Mozilla Gopher connection
  1789. Protocol: TCP
  1790. RemotePort: 70
  1791. Direction: Outbound
  1792. AllowIt
  1793.  
  1794. DefaultState: 1
  1795. RuleName: Mozilla FTP connection
  1796. Protocol: TCP
  1797. RemotePort: 21
  1798. Direction: Outbound
  1799. ActivateSI AlgFtp 
  1800. AllowIt
  1801.  
  1802. DefaultState: 1
  1803. RuleName: Mozilla Send Mail
  1804. Protocol: TCP
  1805. RemotePort: 25, 110
  1806. Direction: Outbound
  1807. AllowIt
  1808.  
  1809. DefaultState: 1
  1810. RuleName: Mozilla Read News
  1811. Protocol: TCP
  1812. RemotePort: 119
  1813. Direction: Outbound
  1814. AllowIt
  1815.  
  1816. DefaultState: 1
  1817. RuleName: Mozilla Receive Mail
  1818. Protocol: TCP
  1819. RemotePort: 110
  1820. Direction: Outbound
  1821. AllowIt
  1822.  
  1823. DefaultState: 1
  1824. RuleName: Mozilla IMAP connection
  1825. Protocol: TCP
  1826. RemotePort: 143
  1827. Direction: Outbound
  1828. AllowIt
  1829.  
  1830. [MyIE Web Browser]
  1831. VisibleState: 0
  1832. Exe:
  1833. MyIE Web Browser, myie.exe
  1834. DefaultState: 1
  1835. RuleName: MyIE Web Browser HTTP connection
  1836. Protocol: TCP
  1837. RemotePort: 80-83
  1838. Direction: Outbound
  1839. AllowIt
  1840.  
  1841. DefaultState: 1
  1842. RuleName: MyIE Web Browser HTTPS connection
  1843. Protocol: TCP
  1844. RemotePort: 443
  1845. Direction: Outbound
  1846. AllowIt
  1847.  
  1848. DefaultState: 1
  1849. RuleName: MyIE Web Browser SOCKS connection
  1850. Protocol: TCP
  1851. RemotePort: 1080
  1852. Direction: Outbound
  1853. AllowIt
  1854.  
  1855. DefaultState: 1
  1856. RuleName: MyIE Web Browser PROXY connection
  1857. Protocol: TCP
  1858. RemotePort: 3128, 8080, 8081, 8088
  1859. Direction: Outbound
  1860. AllowIt
  1861.  
  1862. DefaultState: 1
  1863. RuleName: MyIE Web Browser Gopher connection
  1864. Protocol: TCP
  1865. RemotePort: 70
  1866. Direction: Outbound
  1867. AllowIt
  1868.  
  1869. DefaultState: 1
  1870. RuleName: MyIE Web Folders
  1871. Protocol: TCP
  1872. LocalPort: 1375
  1873. Direction: Inbound
  1874. AllowIt
  1875.  
  1876. DefaultState: 1
  1877. RuleName: MyIE Web Folders
  1878. Protocol: UDP
  1879. LocalPort: 1040-1050
  1880. AllowIt
  1881.  
  1882. DefaultState: 1
  1883. RuleName: MyIE Web Browser FTP connection
  1884. Protocol: TCP
  1885. RemotePort: 21
  1886. Direction: Outbound
  1887. ActivateSI AlgFtp 
  1888. AllowIt
  1889.  
  1890. [GoSURF]
  1891. VisibleState: 0
  1892. Exe:
  1893. GoSURF, gosurf.exe
  1894. DefaultState: 1
  1895. RuleName: GoSURF HTTP connection
  1896. Protocol: TCP
  1897. RemotePort: 80-83
  1898. Direction: Outbound
  1899. AllowIt
  1900.  
  1901. DefaultState: 1
  1902. RuleName: GoSURF HTTPS connection
  1903. Protocol: TCP
  1904. RemotePort: 443
  1905. Direction: Outbound
  1906. AllowIt
  1907.  
  1908. DefaultState: 1
  1909. RuleName: GoSURF SOCKS connection
  1910. Protocol: TCP
  1911. RemotePort: 1080
  1912. Direction: Outbound
  1913. AllowIt
  1914.  
  1915. DefaultState: 1
  1916. RuleName: GoSURF PROXY connection
  1917. Protocol: TCP
  1918. RemotePort: 3128, 8080, 8081, 8088
  1919. Direction: Outbound
  1920. AllowIt
  1921.  
  1922. DefaultState: 1
  1923. RuleName: GoSURF Gopher connection
  1924. Protocol: TCP
  1925. RemotePort: 70
  1926. Direction: Outbound
  1927. AllowIt
  1928.  
  1929. DefaultState: 1
  1930. RuleName: GoSURF Web Folders
  1931. Protocol: TCP
  1932. LocalPort: 1375
  1933. Direction: Inbound
  1934. AllowIt
  1935.  
  1936. DefaultState: 1
  1937. RuleName: GoSURF Web Folders
  1938. Protocol: UDP
  1939. LocalPort: 1040-1050
  1940. AllowIt
  1941.  
  1942. ; Proxies
  1943.  
  1944. [AnalogX Proxy]
  1945. VisibleState: 0
  1946. Exe:
  1947. AnalogX Proxy, proxy.exe
  1948. DefaultState: 1
  1949. RuleName: AnalogX Proxy HTTP connection
  1950. Protocol: TCP
  1951. RemotePort: 80-83, 1080, 3128, 8080, 8081, 8088, 11523
  1952. Direction: Outbound
  1953. AllowIt
  1954.  
  1955. DefaultState: 1
  1956. RuleName: AnalogX Proxy HTTPS connection
  1957. Protocol: TCP
  1958. RemotePort: 443
  1959. Direction: Outbound
  1960. AllowIt
  1961.  
  1962. DefaultState: 1
  1963. RuleName: Send mail by AnalogX Proxy
  1964. Protocol: TCP
  1965. RemotePort: 25
  1966. Direction: Outbound
  1967. AllowIt
  1968.  
  1969. DefaultState: 1
  1970. RuleName: Receive mail by AnalogX Proxy
  1971. Protocol: TCP
  1972. RemotePort: 110
  1973. Direction: Outbound
  1974. AllowIt
  1975.  
  1976. DefaultState: 1
  1977. RuleName: Read news by AnalogX Proxy
  1978. Protocol: TCP
  1979. RemotePort: 119
  1980. Direction: Outbound
  1981. AllowIt
  1982.  
  1983. DefaultState: 1
  1984. RuleName: AnalogX Proxy FTP connection
  1985. Protocol: TCP
  1986. RemotePort: 21
  1987. Direction: Outbound
  1988. ActivateSI AlgFtp 
  1989. AllowIt
  1990.  
  1991. [WebWasher]
  1992. VisibleState: 0
  1993. Exe:
  1994. WebWasher, wwasher.exe
  1995. DefaultState: 1
  1996. RuleName: WebWasher connection
  1997. Protocol: TCP
  1998. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  1999. Direction: Outbound
  2000. AllowIt
  2001.  
  2002. [The Proxomitron]
  2003. VisibleState: 0
  2004. Exe:
  2005. The Proxomitron, proxomitron.exe
  2006. DefaultState: 1
  2007. RuleName: The Proxomitron connection
  2008. Protocol: TCP
  2009. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2010. Direction: Outbound
  2011. AllowIt
  2012.  
  2013. DefaultState: 1
  2014. RuleName: Allow local Proxomitron connection
  2015. Protocol: TCP
  2016. RemoteHost: 127.0.0.1
  2017. Direction: Inbound
  2018. AllowIt
  2019.  
  2020. DefaultState: 1
  2021. RuleName: Block incoming Proxomitron connection
  2022. Protocol: TCP
  2023. Direction: Inbound
  2024. BlockIt
  2025.  
  2026. ; Download Manager
  2027.  
  2028. [Download Accelerator Plus]
  2029. VisibleState: 0
  2030. Exe:
  2031. Download Accelerator Plus, dap.exe
  2032. DefaultState: 1
  2033. RuleName: Download Accelerator Plus HTTP connection
  2034. Protocol: TCP
  2035. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2036. Direction: Outbound
  2037. AllowIt
  2038.  
  2039. DefaultState: 1
  2040. RuleName: Download Accelerator Plus FTP connection
  2041. Protocol: TCP
  2042. RemotePort: 21
  2043. Direction: Outbound
  2044. ActivateSI AlgFtp 
  2045. AllowIt
  2046.  
  2047. [LeechGet]
  2048. VisibleState: 0
  2049. Exe:
  2050. LeechGet, LeechGet.exe
  2051. DefaultState: 1
  2052. RuleName: LeechGet HTTP connection
  2053. Protocol: TCP
  2054. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2055. Direction: Outbound
  2056. AllowIt
  2057.  
  2058. DefaultState: 1
  2059. RuleName: LeechGet FTP connection
  2060. Protocol: TCP
  2061. RemotePort: 21
  2062. Direction: Outbound
  2063. ActivateSI AlgFtp 
  2064. AllowIt
  2065.  
  2066. [Download Master]
  2067. VisibleState: 0
  2068. Exe:
  2069. Download Master, dmaster.exe
  2070. DefaultState: 1
  2071. RuleName: Download Master HTTP connection
  2072. Protocol: TCP
  2073. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2074. Direction: Outbound
  2075. AllowIt
  2076.  
  2077. DefaultState: 1
  2078. RuleName: Download Master FTP connection
  2079. Protocol: TCP
  2080. RemotePort: 21
  2081. Direction: Outbound
  2082. ActivateSI AlgFtp 
  2083. AllowIt
  2084.  
  2085. [ReGet]
  2086. VisibleState: 0
  2087. Exe:
  2088. ReGet, reget.exe
  2089. ReGet Deluxe, regetdx.exe
  2090. ReGet Junior, regetjr.exe
  2091. ReGet Pro, regetpro.exe
  2092. DefaultState: 1
  2093. RuleName: ReGet connection
  2094. Protocol: TCP
  2095. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2096. Direction: Outbound
  2097. AllowIt
  2098.  
  2099. DefaultState: 1
  2100. RuleName: ReGet FTP connection
  2101. Protocol: TCP
  2102. RemotePort: 21
  2103. Direction: Outbound
  2104. ActivateSI AlgFtp 
  2105. AllowIt
  2106.  
  2107. [ReGet Update]
  2108. VisibleState: 0
  2109. Exe:
  2110. ReGet Update, regetupd.exe
  2111. DefaultState: 1
  2112. RuleName: ReGet Updater
  2113. Protocol: TCP
  2114. RemotePort: 80, 3128, 8080, 1080, 11523
  2115. Direction: Outbound
  2116. AllowIt
  2117.  
  2118. [3wGet]
  2119. VisibleState: 0
  2120. Exe:
  2121. 3wGet, 3wget.exe
  2122. DefaultState: 1
  2123. RuleName: 3wGet connection
  2124. Protocol: TCP
  2125. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2126. Direction: Outbound
  2127. AllowIt
  2128.  
  2129. DefaultState: 1
  2130. RuleName: 3wGet FTP connection
  2131. Protocol: TCP
  2132. RemotePort: 21
  2133. Direction: Outbound
  2134. ActivateSI AlgFtp 
  2135. AllowIt
  2136.  
  2137. [Mass Downloader]
  2138. VisibleState: 0
  2139. Exe:
  2140. Mass Downloader, massdown.exe
  2141. DefaultState: 1
  2142. RuleName: Mass Downloader connection
  2143. Protocol: TCP
  2144. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2145. Direction: Outbound
  2146. AllowIt
  2147.  
  2148. DefaultState: 1
  2149. RuleName: Mass Downloader FTP connection
  2150. Protocol: TCP
  2151. RemotePort: 21
  2152. Direction: Outbound
  2153. ActivateSI AlgFtp 
  2154. AllowIt
  2155.  
  2156. [NetAnts]
  2157. VisibleState: 0
  2158. Exe:
  2159. NetAnts, netants.exe
  2160. DefaultState: 1
  2161. RuleName: NetAnts connection
  2162. Protocol: TCP
  2163. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2164. Direction: Outbound
  2165. AllowIt
  2166.  
  2167. DefaultState: 1
  2168. RuleName: NetAnts FTP connection
  2169. Protocol: TCP
  2170. RemotePort: 21
  2171. Direction: Outbound
  2172. ActivateSI AlgFtp 
  2173. AllowIt
  2174.  
  2175. [Lightning Download]
  2176. VisibleState: 0
  2177. Exe:
  2178. Lightning Download, lightning.exe
  2179. DefaultState: 1
  2180. RuleName: Lightning Download connection
  2181. Protocol: TCP
  2182. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2183. Direction: Outbound
  2184. AllowIt
  2185.  
  2186. DefaultState: 1
  2187. RuleName: Lightning Download FTP connection
  2188. Protocol: TCP
  2189. RemotePort: 21
  2190. Direction: Outbound
  2191. ActivateSI AlgFtp 
  2192. AllowIt
  2193.  
  2194. [Star Downloader]
  2195. VisibleState: 0
  2196. Exe:
  2197. Star Downloader, stardown.exe
  2198. DefaultState: 1
  2199. RuleName: Star Downloader connection
  2200. Protocol: TCP
  2201. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2202. Direction: Outbound
  2203. AllowIt
  2204.  
  2205. DefaultState: 1
  2206. RuleName: Star Downloader FTP connection
  2207. Protocol: TCP
  2208. RemotePort: 21
  2209. Direction: Outbound
  2210. ActivateSI AlgFtp 
  2211. AllowIt
  2212.  
  2213. [FlashGet]
  2214. VisibleState: 0
  2215. Exe:
  2216. FlashGet, jetcar.exe
  2217. FlashGet, flashget.exe
  2218. DefaultState: 1
  2219. RuleName: FlashGet connection
  2220. Protocol: TCP
  2221. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2222. Direction: Outbound
  2223. AllowIt
  2224.  
  2225. DefaultState: 1
  2226. RuleName: FlashGet FTP connection
  2227. Protocol: TCP
  2228. RemotePort: 21
  2229. Direction: Outbound
  2230. ActivateSI AlgFtp 
  2231. AllowIt
  2232.  
  2233. [Go!Zilla]
  2234. VisibleState: 0
  2235. Exe:
  2236. Go!Zilla, go.exe
  2237. DefaultState: 1
  2238. RuleName: Go!Zilla connection
  2239. Protocol: TCP
  2240. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2241. Direction: Outbound
  2242. AllowIt
  2243.  
  2244. DefaultState: 1
  2245. RuleName: Go!Zilla FTP connection
  2246. Protocol: TCP
  2247. RemotePort: 21
  2248. Direction: Outbound
  2249. ActivateSI AlgFtp 
  2250. AllowIt
  2251.  
  2252. [GetRight]
  2253. VisibleState: 0
  2254. Exe:
  2255. GetRight, getright.exe
  2256. DefaultState: 1
  2257. RuleName: GetRight connection
  2258. Protocol: TCP
  2259. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2260. Direction: Outbound
  2261. AllowIt
  2262.  
  2263. DefaultState: 1
  2264. RuleName: GetRight FTP connection
  2265. Protocol: TCP
  2266. RemotePort: 21
  2267. Direction: Outbound
  2268. ActivateSI AlgFtp 
  2269. AllowIt
  2270.  
  2271. [Net Vampire]
  2272. VisibleState: 0
  2273. Exe:
  2274. Net Vampire, vampire.exe
  2275. DefaultState: 1
  2276. RuleName: Net Vampire connection
  2277. Protocol: TCP
  2278. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2279. Direction: Outbound
  2280. AllowIt
  2281.  
  2282. DefaultState: 1
  2283. RuleName: Net Vampire FTP connection
  2284. Protocol: TCP
  2285. RemotePort: 21
  2286. Direction: Outbound
  2287. ActivateSI AlgFtp 
  2288. AllowIt
  2289.  
  2290. [WGET]
  2291. VisibleState: 0
  2292. Exe:
  2293. WGET, wget.exe
  2294. DefaultState: 1
  2295. RuleName: WGET connection
  2296. Protocol: TCP
  2297. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2298. Direction: Outbound
  2299. AllowIt
  2300.  
  2301. DefaultState: 1
  2302. RuleName: WGET FTP connection
  2303. Protocol: TCP
  2304. RemotePort: 21
  2305. Direction: Outbound
  2306. ActivateSI AlgFtp 
  2307. AllowIt
  2308.  
  2309. ; Offline Browser
  2310.  
  2311. [DISCo Pump]
  2312. VisibleState: 0
  2313. Exe:
  2314. DISCo Pump, dpump.exe
  2315. DefaultState: 1
  2316. RuleName: DISCo Pump connection
  2317. Protocol: TCP
  2318. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2319. Direction: Outbound
  2320. AllowIt
  2321.  
  2322. [DISCo Pump Update]
  2323. VisibleState: 0
  2324. Exe:
  2325. DISCo Pump Update, dupgrad.exe
  2326. DefaultState: 1
  2327. RuleName: DISCo Pump Update connection
  2328. Protocol: TCP
  2329. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2330. Direction: Outbound
  2331. AllowIt
  2332.  
  2333. [Teleport Pro]
  2334. VisibleState: 0
  2335. Exe:
  2336. Teleport Pro, pro.exe
  2337. DefaultState: 1
  2338. RuleName: Teleport Pro connection
  2339. Protocol: TCP
  2340. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2341. Direction: Outbound
  2342. AllowIt
  2343.  
  2344. [Offline Explorer]
  2345. VisibleState: 0
  2346. Exe:
  2347. Offline Explorer, oe.exe
  2348. DefaultState: 1
  2349. RuleName: Offline Explorer connection
  2350. Protocol: TCP
  2351. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2352. Direction: Outbound
  2353. AllowIt
  2354.  
  2355. [SuperHTTP Web Spider]
  2356. VisibleState: 0
  2357. Exe:
  2358. SuperHTTP Web Spider, superhttp.exe
  2359. DefaultState: 1
  2360. RuleName: SuperHTTP connection
  2361. Protocol: TCP
  2362. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2363. Direction: Outbound
  2364. AllowIt
  2365.  
  2366. [WebZIP]
  2367. VisibleState: 0
  2368. Exe:
  2369. WebZIP, webzip.exe
  2370. DefaultState: 1
  2371. RuleName: WebZIP connection
  2372. Protocol: TCP
  2373. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2374. Direction: Outbound
  2375. AllowIt
  2376.  
  2377. [WebCopier]
  2378. VisibleState: 0
  2379. Exe:
  2380. WebCopier, webcopier.exe
  2381. DefaultState: 1
  2382. RuleName: WebCopier connection
  2383. Protocol: TCP
  2384. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2385. Direction: Outbound
  2386. AllowIt
  2387.  
  2388. [WebSite eXtractor]
  2389. VisibleState: 0
  2390. Exe:
  2391. WebSite eXtractor, webextra.exe
  2392. DefaultState: 1
  2393. RuleName: WebSite eXtractor connection
  2394. Protocol: TCP
  2395. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2396. Direction: Outbound
  2397. AllowIt
  2398.  
  2399. ; Agnitum Products
  2400.  
  2401. [Tauscan Update]
  2402. VisibleState: 0
  2403. Exe:
  2404. Tauscan Update, taupdate.exe
  2405. DefaultState: 1
  2406. RuleName: Tauscan Update
  2407. Protocol: TCP
  2408. RemotePort: 80, 8080, 3128, 1080
  2409. Direction: Outbound
  2410. AllowIt
  2411.  
  2412. [Agnitum Products Update]
  2413. VisibleState: 0
  2414. Exe:
  2415. Outpost Update, aupdrun.exe
  2416. DefaultState: 1
  2417. RuleName: Agnitum Products Update
  2418. Protocol: TCP
  2419. RemotePort: 80, 443, 802, 3128, 1080, 8080
  2420. Direction: Outbound
  2421. AllowIt
  2422.  
  2423. [Jammer]
  2424. VisibleState: 0
  2425. Exe:
  2426. Jammer, jammer.exe
  2427. DefaultState: 1
  2428. RuleName: Jammer Report
  2429. Protocol: TCP
  2430. RemotePort: 25
  2431. Direction: Outbound
  2432. AllowIt
  2433.  
  2434. [Agnitum Auto FeedBack]
  2435. VisibleState: 0
  2436. Exe:
  2437. Agnitum Auto FeedBack, feedback.exe
  2438. DefaultState: 1
  2439. RuleName: Agnitum Auto FeedBack
  2440. Protocol: TCP
  2441. RemotePort: 80, 8080, 3128
  2442. Direction: Outbound
  2443. AllowIt
  2444.  
  2445. [Agnitum Outpost Firewall]
  2446. VisibleState: 0
  2447. Exe:
  2448. Agnitum Outpost Firewall, outpost.exe
  2449. DefaultState: 1
  2450. RuleName: Agnitum Outpost Firewall connection
  2451. Protocol: TCP
  2452. RemotePort: 80, 8080, 3128
  2453. Direction: Outbound
  2454. AllowIt
  2455. IgnoreCC
  2456.  
  2457. ; FTP
  2458.  
  2459. [Windows FTP Client]
  2460. VisibleState: 0
  2461. Exe:
  2462. Windows FTP Client, ftp.exe
  2463. DefaultState: 1
  2464. RuleName: Windows FTP client connection
  2465. Protocol: TCP
  2466. RemotePort: 21
  2467. Direction: Outbound
  2468. ActivateSI AlgFtp 
  2469. AllowIt
  2470.  
  2471. [CuteFTP]
  2472. VisibleState: 0
  2473. Exe:
  2474. CuteFTP, cutftp32.exe
  2475. CuteFTP Pro, cftppro.exe
  2476. CuteFTP Pro, ftpte.exe
  2477. DefaultState: 1
  2478. RuleName: CuteFTP connection
  2479. Protocol: TCP
  2480. RemotePort: 21
  2481. Direction: Outbound
  2482. ActivateSI AlgFtp 
  2483. AllowIt
  2484.  
  2485. DefaultState: 1
  2486. RuleName: CuteFTP HTTP connection
  2487. Protocol: TCP
  2488. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2489. Direction: Outbound
  2490. AllowIt
  2491.  
  2492. [BulletProof FTP]
  2493. VisibleState: 0
  2494. Exe:
  2495. BulletProof FTP, bpftp.exe
  2496. DefaultState: 1
  2497. RuleName: BulletProof FTP connection
  2498. Protocol: TCP
  2499. RemotePort: 21
  2500. Direction: Outbound
  2501. ActivateSI AlgFtp 
  2502. AllowIt
  2503.  
  2504. [Dreamweaver FTP client]
  2505. VisibleState: 0
  2506. Exe:
  2507. Dreamweaver FTP client, dreamweaver.exe
  2508. DefaultState: 1
  2509. RuleName: Dreamweaver FTP client connection
  2510. Protocol: TCP
  2511. RemotePort: 21
  2512. Direction: Outbound
  2513. ActivateSI AlgFtp 
  2514. AllowIt
  2515.  
  2516. [PrimaSoft AutoFTP]
  2517. VisibleState: 0
  2518. Exe:
  2519. PrimaSoft AutoFTP, ftppro.exe
  2520. DefaultState: 1
  2521. RuleName: PrimaSoft AutoFTP connection
  2522. Protocol: TCP
  2523. RemotePort: 21
  2524. Direction: Outbound
  2525. ActivateSI AlgFtp 
  2526. AllowIt
  2527.  
  2528. [FlashFXP]
  2529. VisibleState: 0
  2530. Exe:
  2531. FlashFXP, flashfxp.exe
  2532. DefaultState: 1
  2533. RuleName: FlashFXP FTP connection
  2534. Protocol: TCP
  2535. RemotePort: 21
  2536. Direction: Outbound
  2537. ActivateSI AlgFtp 
  2538. AllowIt
  2539.  
  2540. [FTP Now]
  2541. VisibleState: 0
  2542. Exe:
  2543. FTP Now, ftp now.exe
  2544. DefaultState: 1
  2545. RuleName: FTP Now connection
  2546. Protocol: TCP
  2547. RemotePort: 21
  2548. Direction: Outbound
  2549. ActivateSI AlgFtp 
  2550. AllowIt
  2551.  
  2552. [TurboFTP]
  2553. VisibleState: 0
  2554. Exe:
  2555. TurboFTP, turboftp.exe
  2556. DefaultState: 1
  2557. RuleName: TurboFTP connection
  2558. Protocol: TCP
  2559. RemotePort: 21
  2560. Direction: Outbound
  2561. ActivateSI AlgFtp 
  2562. AllowIt
  2563.  
  2564. [AbsoluteFTP]
  2565. VisibleState: 0
  2566. Exe:
  2567. AbsuluteFTP, absoluteftp.exe
  2568. DefaultState: 1
  2569. RuleName: AbsoluteFTP connection
  2570. Protocol: TCP
  2571. RemotePort: 21
  2572. Direction: Outbound
  2573. ActivateSI AlgFtp 
  2574. AllowIt
  2575.  
  2576. [RemFTP]
  2577. VisibleState: 0
  2578. Exe:
  2579. RemFTP, remftp.exe
  2580. DefaultState: 1
  2581. RuleName: RemFTP connection
  2582. Protocol: TCP
  2583. RemotePort: 21
  2584. Direction: Outbound
  2585. ActivateSI AlgFtp 
  2586. AllowIt
  2587.  
  2588. [Simply COOL FTP]
  2589. VisibleState: 0
  2590. Exe:
  2591. Simply COOL FTP, scftp.exe
  2592. DefaultState: 1
  2593. RuleName: Simply COOL FTP connection
  2594. Protocol: TCP
  2595. RemotePort: 21
  2596. Direction: Outbound
  2597. ActivateSI AlgFtp 
  2598. AllowIt
  2599.  
  2600. [Crystal FTP]
  2601. VisibleState: 0
  2602. Exe:
  2603. Crystal FTP, crystalftp.exe
  2604. DefaultState: 1
  2605. RuleName: Crystal FTP connection
  2606. Protocol: TCP
  2607. RemotePort: 21
  2608. Direction: Outbound
  2609. ActivateSI AlgFtp 
  2610. AllowIt
  2611.  
  2612. DefaultState: 1
  2613. RuleName: Crystal FTP new version check
  2614. Protocol: TCP
  2615. RemotePort: 80
  2616. Direction: Outbound
  2617. AllowIt
  2618.  
  2619. [KenFTP]
  2620. VisibleState: 0
  2621. Exe:
  2622. KenFTP, ken ftp.exe
  2623. DefaultState: 1
  2624. RuleName: KenFTP connection
  2625. Protocol: TCP
  2626. RemotePort: 21
  2627. Direction: Outbound
  2628. ActivateSI AlgFtp 
  2629. AllowIt
  2630.  
  2631. [FTP Commander]
  2632. VisibleState: 0
  2633. Exe:
  2634. FTP Commander, ftpcomm.exe
  2635. DefaultState: 1
  2636. RuleName: FTP Commander connection
  2637. Protocol: TCP
  2638. RemotePort: 21
  2639. Direction: Outbound
  2640. ActivateSI AlgFtp 
  2641. AllowIt
  2642.  
  2643. [FTP Navigator]
  2644. VisibleState: 0
  2645. Exe:
  2646. FTP Navigator, ftpnavi.exe
  2647. DefaultState: 1
  2648. RuleName: FTP Navigator connection
  2649. Protocol: TCP
  2650. RemotePort: 21
  2651. Direction: Outbound
  2652. ActivateSI AlgFtp 
  2653. AllowIt
  2654.  
  2655. [AceFTP]
  2656. VisibleState: 0
  2657. Exe:
  2658. AceFTP, aceftp.exe
  2659. DefaultState: 1
  2660. RuleName: AceFTP connection
  2661. Protocol: TCP
  2662. RemotePort: 21
  2663. Direction: Outbound
  2664. ActivateSI AlgFtp 
  2665. AllowIt
  2666.  
  2667. [AutoSyncFTP]
  2668. VisibleState: 0
  2669. Exe:
  2670. AutoSyncFTP, autosyncftp.exe
  2671. DefaultState: 1
  2672. RuleName: AutoSyncFTP connection
  2673. Protocol: TCP
  2674. RemotePort: 21
  2675. Direction: Outbound
  2676. ActivateSI AlgFtp 
  2677. AllowIt
  2678.  
  2679. [Click FTP]
  2680. VisibleState: 0
  2681. Exe:
  2682. Click FTP, click ftp.exe
  2683. DefaultState: 1
  2684. RuleName: Click FTP connection
  2685. Protocol: TCP
  2686. RemotePort: 21
  2687. Direction: Outbound
  2688. ActivateSI AlgFtp 
  2689. AllowIt
  2690.  
  2691. [CoffeeCup Direct FTP]
  2692. VisibleState: 0
  2693. Exe:
  2694. CoffeeCup Direct FTP, directftp5.exe
  2695. DefaultState: 1
  2696. RuleName: CoffeeCup Direct FTP connection
  2697. Protocol: TCP
  2698. RemotePort: 21
  2699. Direction: Outbound
  2700. ActivateSI AlgFtp 
  2701. AllowIt
  2702.  
  2703. [DC SmartFTP]
  2704. VisibleState: 0
  2705. Exe:
  2706. DC SmartFTP, dcsmartftp.exe
  2707. DefaultState: 1
  2708. RuleName: DC SmartFTP connection
  2709. Protocol: TCP
  2710. RemotePort: 21
  2711. Direction: Outbound
  2712. ActivateSI AlgFtp 
  2713. AllowIt
  2714.  
  2715. [SmartFTP]
  2716. VisibleState: 0
  2717. Exe:
  2718. SmartFTP, smartftp.exe
  2719. DefaultState: 1
  2720. RuleName: SmartFTP connection
  2721. Protocol: TCP
  2722. RemotePort: 21
  2723. Direction: Outbound
  2724. ActivateSI AlgFtp 
  2725. AllowIt
  2726.  
  2727. DefaultState: 1
  2728. RuleName: SmartFTP HTTP connection
  2729. Protocol: TCP
  2730. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  2731. Direction: Outbound
  2732. AllowIt
  2733.  
  2734. [FileZilla]
  2735. VisibleState: 0
  2736. Exe:
  2737. FileZilla, filezilla.exe
  2738. DefaultState: 1
  2739. RuleName: FileZilla FTP connection
  2740. Protocol: TCP
  2741. RemotePort: 21
  2742. Direction: Outbound
  2743. ActivateSI AlgFtp 
  2744. AllowIt
  2745.  
  2746. [Site Publisher]
  2747. VisibleState: 0
  2748. Exe:
  2749. Site Publisher, sitepub.exe
  2750. DefaultState: 1
  2751. RuleName: Site Publisher FTP connection
  2752. Protocol: TCP
  2753. RemotePort: 21
  2754. Direction: Outbound
  2755. ActivateSI AlgFtp 
  2756. AllowIt
  2757.  
  2758. [FTP Voyager]
  2759. VisibleState: 0
  2760. Exe:
  2761. FTP Voyager, ftpvoyager.exe
  2762. DefaultState: 1
  2763. RuleName: FTP Voyager connection
  2764. Protocol: TCP
  2765. RemotePort: 21
  2766. Direction: Outbound
  2767. ActivateSI AlgFtp 
  2768. AllowIt
  2769.  
  2770. [FTPRight]
  2771. VisibleState: 0
  2772. Exe:
  2773. FTPRight, ftpright.exe
  2774. DefaultState: 1
  2775. RuleName: FTPRight connection
  2776. Protocol: TCP
  2777. RemotePort: 21
  2778. Direction: Outbound
  2779. ActivateSI AlgFtp 
  2780. AllowIt
  2781.  
  2782. [IglooFTP Pro]
  2783. VisibleState: 0
  2784. Exe:
  2785. IglooFTP Pro, iglooftp pro.exe
  2786. DefaultState: 1
  2787. RuleName: IglooFTP Pro connection
  2788. Protocol: TCP
  2789. RemotePort: 21
  2790. Direction: Outbound
  2791. ActivateSI AlgFtp 
  2792. AllowIt
  2793.  
  2794. [Magellan Explorer]
  2795. VisibleState: 0
  2796. Exe:
  2797. Magellan Explorer, magellan.exe
  2798. DefaultState: 1
  2799. RuleName: Magellan Explorer FTP connection
  2800. Protocol: TCP
  2801. RemotePort: 21
  2802. Direction: Outbound
  2803. ActivateSI AlgFtp 
  2804. AllowIt
  2805.  
  2806. [Microviet Internet FTP]
  2807. VisibleState: 0
  2808. Exe:
  2809. Microviet Internet FTP, internet ftp.exe
  2810. DefaultState: 1
  2811. RuleName: Microviet Internet FTP connection
  2812. Protocol: TCP
  2813. RemotePort: 21
  2814. Direction: Outbound
  2815. ActivateSI AlgFtp 
  2816. AllowIt
  2817.  
  2818. [miniftp]
  2819. VisibleState: 0
  2820. Exe:
  2821. miniftp, miniftp.exe
  2822. DefaultState: 1
  2823. RuleName: miniftp connection
  2824. Protocol: TCP
  2825. RemotePort: 21
  2826. Direction: Outbound
  2827. ActivateSI AlgFtp 
  2828. AllowIt
  2829.  
  2830. [NetLoad]
  2831. VisibleState: 0
  2832. Exe:
  2833. NetLoad, netload.exe
  2834. DefaultState: 1
  2835. RuleName: NetLoad FTP connection
  2836. Protocol: TCP
  2837. RemotePort: 21
  2838. Direction: Outbound
  2839. ActivateSI AlgFtp 
  2840. AllowIt
  2841.  
  2842. [SecureFX]
  2843. VisibleState: 0
  2844. Exe:
  2845. SecureFX, securefx.exe
  2846. DefaultState: 1
  2847. RuleName: SecureFX connection
  2848. Protocol: TCP
  2849. RemotePort: 21
  2850. Direction: Outbound
  2851. ActivateSI AlgFtp 
  2852. AllowIt
  2853.  
  2854. DefaultState: 1
  2855. RuleName: SecureFX SFTP connection
  2856. Protocol: TCP
  2857. RemotePort: 22
  2858. Direction: Outbound
  2859. AllowIt
  2860.  
  2861. [WebFTP]
  2862. VisibleState: 0
  2863. Exe:
  2864. WebFTP, webftp3.exe
  2865. DefaultState: 1
  2866. RuleName: WebFTP connection
  2867. Protocol: TCP
  2868. RemotePort: 21
  2869. Direction: Outbound
  2870. ActivateSI AlgFtp 
  2871. AllowIt
  2872.  
  2873. [WS_FTP]
  2874. VisibleState: 0
  2875. Exe:
  2876. WS_FTP, ftp95pro.exe
  2877. DefaultState: 1
  2878. RuleName: WS_FTP connection
  2879. Protocol: TCP
  2880. RemotePort: 21
  2881. Direction: Outbound
  2882. ActivateSI AlgFtp 
  2883. AllowIt
  2884.  
  2885. [Windows Sockets FTP Client]
  2886. VisibleState: 0
  2887. Exe:
  2888. WinFTP, winftp32.exe
  2889. DefaultState: 1
  2890. RuleName: WinFTP connection
  2891. Protocol: TCP
  2892. RemotePort: 21
  2893. Direction: Outbound
  2894. ActivateSI AlgFtp 
  2895. AllowIt
  2896.  
  2897. [FAR Manager]
  2898. VisibleState: 0
  2899. Exe:
  2900. Far Manager, far.exe
  2901. DefaultState: 1
  2902. RuleName: FAR manager FTP connection
  2903. Protocol: TCP
  2904. RemotePort: 21
  2905. Direction: Outbound
  2906. ActivateSI AlgFtp 
  2907. AllowIt
  2908.  
  2909. [Total Commander]
  2910. VisibleState: 0
  2911. Exe:
  2912. Total Commander, totalcmd.exe
  2913. DefaultState: 1
  2914. RuleName: Total Commander FTP connection
  2915. Protocol: TCP
  2916. RemotePort: 21
  2917. Direction: Outbound
  2918. ActivateSI AlgFtp 
  2919. AllowIt
  2920.  
  2921. [Windows Commander]
  2922. VisibleState: 0
  2923. Exe:
  2924. Windows Commander, wincmd32.exe
  2925. DefaultState: 1
  2926. RuleName: Windows Commander FTP connection
  2927. Protocol: TCP
  2928. RemotePort: 21
  2929. Direction: Outbound
  2930. ActivateSI AlgFtp 
  2931. AllowIt
  2932.  
  2933. ; Telnet
  2934.  
  2935. [SecureCRT]
  2936. VisibleState: 0
  2937. Exe:
  2938. SecureCRT, securecrt.exe
  2939. DefaultState: 1
  2940. RuleName: SecureCRT connection
  2941. Protocol: TCP
  2942. RemotePort: 22
  2943. Direction: Outbound
  2944. AllowIt
  2945.  
  2946. [AlphaCom Terminal Emulator]
  2947. VisibleState: 0
  2948. Exe:
  2949. AlphaCom, alpha.exe
  2950. DefaultState: 1
  2951. RuleName: AlphaCom telnet connection
  2952. Protocol: TCP
  2953. RemotePort: 23
  2954. Direction: Outbound
  2955. AllowIt
  2956.  
  2957. [Anzio]
  2958. VisibleState: 0
  2959. Exe:
  2960. Anzio, anzio32r.exe
  2961. DefaultState: 1
  2962. RuleName: Anzio telnet connection
  2963. Protocol: TCP
  2964. RemotePort: 23
  2965. Direction: Outbound
  2966. AllowIt
  2967.  
  2968. DefaultState: 1
  2969. RuleName: Anzio rlogin connection
  2970. Protocol: TCP
  2971. RemotePort: 513
  2972. Direction: Outbound
  2973. AllowIt
  2974.  
  2975. [Com]
  2976. VisibleState: 0
  2977. Exe:
  2978. Com, com75.exe
  2979. DefaultState: 1
  2980. RuleName: Com telnet connection
  2981. Protocol: TCP
  2982. RemotePort: 23
  2983. Direction: Outbound
  2984. AllowIt
  2985.  
  2986. DefaultState: 1
  2987. RuleName: Com incoming telnet connection
  2988. Protocol: TCP
  2989. LocalPort: 23
  2990. Direction: Inbound
  2991. AllowIt
  2992.  
  2993. DefaultState: 1
  2994. RuleName: Com FTP connection
  2995. Protocol: TCP
  2996. RemotePort: 21
  2997. Direction: Outbound
  2998. ActivateSI AlgFtp 
  2999. AllowIt
  3000.  
  3001. [Emu]
  3002. VisibleState: 0
  3003. Exe:
  3004. Emu, emu.exe
  3005. DefaultState: 1
  3006. RuleName: Emu telnet connection
  3007. Protocol: TCP
  3008. RemotePort: 23
  3009. Direction: Outbound
  3010. AllowIt
  3011.  
  3012. [IVT]
  3013. VisibleState: 0
  3014. Exe:
  3015. IVT, ivt.exe
  3016. DefaultState: 1
  3017. RuleName: IVT telnet connection
  3018. Protocol: TCP
  3019. RemotePort: 23
  3020. Direction: Outbound
  3021. AllowIt
  3022.  
  3023. [KoalaTerm]
  3024. VisibleState: 0
  3025. Exe:
  3026. KoalaTerm, mkt.exe
  3027. DefaultState: 1
  3028. RuleName: KoalaTerm telnet connection
  3029. Protocol: TCP
  3030. RemotePort: 23
  3031. Direction: Outbound
  3032. AllowIt
  3033.  
  3034. DefaultState: 1
  3035. RuleName: KoalaTerm echo connection
  3036. Protocol: TCP
  3037. RemotePort: 7
  3038. Direction: Outbound
  3039. AllowIt
  3040.  
  3041. [Mocha]
  3042. VisibleState: 0
  3043. Exe:
  3044. Mocha, mtn5250.exe
  3045. DefaultState: 1
  3046. RuleName: Mocha telnet connection
  3047. Protocol: TCP
  3048. RemotePort: 23
  3049. Direction: Outbound
  3050. AllowIt
  3051.  
  3052. [NetTerm]
  3053. VisibleState: 0
  3054. Exe:
  3055. NetTerm, netterm.exe
  3056. DefaultState: 1
  3057. RuleName: NetTerm telnet connection
  3058. Protocol: TCP
  3059. RemotePort: 23
  3060. Direction: Outbound
  3061. AllowIt
  3062.  
  3063. [Nexus Mainframe Terminal]
  3064. VisibleState: 0
  3065. Exe:
  3066. Nexus Mainframe Terminal, nmt.exe
  3067. DefaultState: 1
  3068. RuleName: Nexus Mainframe Terminal telnet connection
  3069. Protocol: TCP
  3070. RemotePort: 23
  3071. Direction: Outbound
  3072. AllowIt
  3073.  
  3074. [Putty]
  3075. VisibleState: 0
  3076. Exe:
  3077. Putty, nmt.exe
  3078. DefaultState: 1
  3079. RuleName: Putty telnet connection
  3080. Protocol: TCP
  3081. RemotePort: 23
  3082. Direction: Outbound
  3083. AllowIt
  3084.  
  3085. [Quick3270]
  3086. VisibleState: 0
  3087. Exe:
  3088. Quick3270, quick3270.exe
  3089. DefaultState: 1
  3090. RuleName: Quick3270 telnet connection
  3091. Protocol: TCP
  3092. RemotePort: 23
  3093. Direction: Outbound
  3094. AllowIt
  3095.  
  3096. [ShellTelnet]
  3097. VisibleState: 0
  3098. Exe:
  3099. ShellTelnet, shellnet.exe
  3100. DefaultState: 1
  3101. RuleName: ShellTelnet telnet connection
  3102. Protocol: TCP
  3103. RemotePort: 23
  3104. Direction: Outbound
  3105. AllowIt
  3106.  
  3107. [TelStar]
  3108. VisibleState: 0
  3109. Exe:
  3110. TelStar, telstar.exe
  3111. DefaultState: 1
  3112. RuleName: TelStar telnet connection
  3113. Protocol: TCP
  3114. RemotePort: 23
  3115. Direction: Outbound
  3116. AllowIt
  3117.  
  3118. [Telnet Streamer]
  3119. VisibleState: 0
  3120. Exe:
  3121. Telnet Streamer, xns.exe
  3122. Telnet Streamer, tns.exe
  3123. DefaultState: 1
  3124. RuleName: Telnet Streamer connection
  3125. Protocol: TCP
  3126. RemotePort: 23
  3127. Direction: Outbound
  3128. AllowIt
  3129.  
  3130. [Tera Term Pro]
  3131. VisibleState: 0
  3132. Exe:
  3133. Tera Term Pro, ttermpro.exe
  3134. DefaultState: 1
  3135. RuleName: Tera Term Pro connection
  3136. Protocol: TCP
  3137. RemotePort: 22, 23
  3138. Direction: Outbound
  3139. AllowIt
  3140.  
  3141. [TN3270]
  3142. VisibleState: 0
  3143. Exe:
  3144. TN3270, tn3270.exe
  3145. DefaultState: 1
  3146. RuleName: TN3270 telnet connection
  3147. Protocol: TCP
  3148. RemotePort: 23
  3149. Direction: Outbound
  3150. AllowIt
  3151.  
  3152. [Windows Telnet Client]
  3153. VisibleState: 0
  3154. Exe:
  3155. Windows Telnet Client, telnet.exe
  3156. DefaultState: 1
  3157. RuleName: Windows Telnet Client connection
  3158. Protocol: TCP
  3159. RemotePort: 23
  3160. Direction: Outbound
  3161. AllowIt
  3162.  
  3163. DefaultState: 1
  3164. RuleName: Windows Telnet Client RLOGIN connection
  3165. Protocol: TCP
  3166. RemotePort: 513
  3167. Direction: Outbound
  3168. AllowIt
  3169.  
  3170. ; Communications
  3171.  
  3172. [AOL Instant Messenger]
  3173. VisibleState: 0
  3174. Exe:
  3175. AOL Instant Messenger, aim.exe
  3176. DefaultState: 1
  3177. RuleName: AOL Instant Messenger Connection
  3178. Protocol: TCP
  3179. RemotePort: 5190
  3180. Direction: Outbound
  3181. AllowIt
  3182.  
  3183. DefaultState: 1
  3184. RuleName: AOL Instant Messenger HTTP connection
  3185. Protocol: TCP
  3186. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3187. Direction: Outbound
  3188. AllowIt
  3189.  
  3190. [Boomerang SST]
  3191. VisibleState: 0
  3192. Exe:
  3193. Boomerang Secure Shuttle Transport, shuttle.exe
  3194. DefaultState: 1
  3195. RuleName: Boomerang SST connection
  3196. Protocol: TCP
  3197. RemoteHost: 216.129.147.*
  3198. Direction: Outbound
  3199. AllowIt
  3200.  
  3201. [Dwyco CDC32]
  3202. VisibleState: 0
  3203. Exe:
  3204. Dwyco CDC32, cdc32.exe
  3205. DefaultState: 1
  3206. RuleName: Dwyco CDC32 server connection
  3207. Protocol: TCP
  3208. RemotePort: 6700-6703
  3209. Direction: Outbound
  3210. AllowIt
  3211.  
  3212. DefaultState: 1
  3213. RuleName: Dwyco CDC32 direct connection
  3214. Protocol: TCP
  3215. RemotePort: 6780
  3216. Direction: Outbound
  3217. AllowIt
  3218.  
  3219. DefaultState: 1
  3220. RuleName: Dwyco CDC32 file transfer and direct video zap
  3221. Protocol: TCP
  3222. RemotePort: 1024-5000
  3223. Direction: Outbound
  3224. AllowIt
  3225.  
  3226. DefaultState: 1
  3227. RuleName: Dwyco CDC32 real-time audio and video
  3228. Protocol: UDP
  3229. RemotePort: 10096, 12000-16090
  3230. AllowIt
  3231.  
  3232. DefaultState: 1
  3233. RuleName: Dwyco CDC32 link test
  3234. Protocol: TCP
  3235. RemotePort: 0
  3236. Direction: Outbound
  3237. AllowIt
  3238.  
  3239. [ICQ]
  3240. Exe:
  3241. Mirabilis ICQ, icq.exe
  3242. ICQLite, icqlite.exe
  3243. DefaultState: 1
  3244. RuleName: ICQ Server connection
  3245. Protocol: UDP
  3246. RemotePort: 4000
  3247. AllowIt
  3248.  
  3249. DefaultState: 1
  3250. RuleName: ICQ Server connection
  3251. Protocol: UDP
  3252. RemotePort: 4000
  3253. AllowIt
  3254.  
  3255. DefaultState: 1
  3256. RuleName: ICQ Client Connection
  3257. Protocol: TCP
  3258. RemotePort: 1024-65535
  3259. Direction: Inbound
  3260. AllowIt
  3261.  
  3262. DefaultState: 1
  3263. RuleName: ICQ Client Connection
  3264. Protocol: TCP
  3265. RemotePort: 1024-65535
  3266. Direction: Outbound
  3267. AllowIt
  3268.  
  3269. DefaultState: 1
  3270. RuleName: ICQ Send Mail
  3271. Protocol: TCP
  3272. RemotePort: 25
  3273. Direction: Outbound
  3274. AllowIt
  3275.  
  3276. DefaultState: 1
  3277. RuleName: ICQ Receive Mail
  3278. Protocol: TCP
  3279. RemotePort: 110
  3280. Direction: Outbound
  3281. AllowIt
  3282.  
  3283. DefaultState: 1
  3284. RuleName: ICQ HTTP connection
  3285. Protocol: TCP
  3286. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3287. Direction: Outbound
  3288. AllowIt
  3289.  
  3290. [Miranda]
  3291. VisibleState: 0
  3292. Exe:
  3293. Miranda, miranda32.exe
  3294. DefaultState: 1
  3295. RuleName: Miranda Connection
  3296. Protocol: TCP
  3297. RemotePort: 5190
  3298. Direction: Outbound
  3299. AllowIt
  3300.  
  3301. DefaultState: 1
  3302. RuleName: Miranda HTTP connection
  3303. Protocol: TCP
  3304. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3305. Direction: Outbound
  3306. AllowIt
  3307.  
  3308. [MSN Messenger]
  3309. VisibleState: 0
  3310. Exe:
  3311. MSN Messenger Service, msmsgs.exe
  3312. MSN Messenger Service, msnmsgr.exe
  3313. DefaultState: 1
  3314. RuleName: MSN Messenger Connection
  3315. Protocol: TCP
  3316. RemotePort: 1863
  3317. Direction: Outbound
  3318. AllowIt
  3319.  
  3320. DefaultState: 1
  3321. RuleName: MSN Messenger voice communications
  3322. Protocol: TCP
  3323. LocalPort: 6901
  3324. Direction: Outbound
  3325. AllowIt
  3326.  
  3327. DefaultState: 1
  3328. RuleName: MSN Messenger voice communications
  3329. Protocol: UDP
  3330. RemotePort: 6901
  3331. AllowIt
  3332.  
  3333. DefaultState: 1
  3334. RuleName: MSN Messenger file transfer
  3335. Protocol: TCP
  3336. RemotePort: 6891-6900
  3337. Direction: Outbound
  3338. AllowIt
  3339.  
  3340. DefaultState: 1
  3341. RuleName: MSN Messenger Remote Assistance
  3342. Protocol: TCP
  3343. RemotePort: 3389
  3344. Direction: Outbound
  3345. AllowIt
  3346.  
  3347. DefaultState: 1
  3348. RuleName: MSN Messenger Application Sharing and Whiteboard
  3349. Protocol: TCP
  3350. RemotePort: 1503
  3351. Direction: Outbound
  3352. AllowIt
  3353.  
  3354. DefaultState: 1
  3355. RuleName: MSN Messenger RTP connection
  3356. Protocol: UDP
  3357. LocalPort: 5004-65535
  3358. AllowIt
  3359.  
  3360. DefaultState: 1
  3361. RuleName: MSN Messenger HTTPS connection
  3362. Protocol: TCP
  3363. RemotePort: 443
  3364. Direction: Outbound
  3365. AllowIt
  3366.  
  3367. [Odigo]
  3368. VisibleState: 0
  3369. Exe:
  3370. Odigo, odigo.exe
  3371. DefaultState: 1
  3372. RuleName: Odigo Connection
  3373. Protocol: TCP
  3374. RemotePort: 80, 3128, 8080, 1080, 2562
  3375. Direction: Outbound
  3376. AllowIt
  3377.  
  3378. [Eyeball Chat]
  3379. VisibleState: 0
  3380. Exe:
  3381. Eyeball Chat, eyeballchat.exe
  3382. DefaultState: 1
  3383. RuleName: Eyeball Chat TCP connection
  3384. Protocol: TCP
  3385. RemotePort: 5500, 5501, 5515
  3386. Direction: Outbound
  3387. AllowIt
  3388.  
  3389. DefaultState: 1
  3390. RuleName: Eyeball Chat UDP connection
  3391. Protocol: UDP
  3392. RemotePort: 5700-5702
  3393. AllowIt
  3394.  
  3395. [IRC]
  3396. Exe:
  3397. mIRC, mirc32.exe
  3398. mIRC, mirc.exe
  3399. DefaultState: 1
  3400. RuleName: mIRC connection
  3401. Protocol: TCP
  3402. RemotePort: 6660-6670
  3403. Direction: Outbound
  3404. AllowIt
  3405.  
  3406. DefaultState: 1
  3407. RuleName: mIRC AUTH connection
  3408. Protocol: TCP
  3409. LocalPort: 113
  3410. Direction: Inbound
  3411. AllowIt
  3412.  
  3413. [Microsoft NetMeeting]
  3414. VisibleState: 0
  3415. Exe:
  3416. Microsoft NetMeeting, conf.exe
  3417. DefaultState: 1
  3418. RuleName: Microsoft NetMeeting Conference
  3419. Protocol: TCP
  3420. RemotePort: 1000-2999
  3421. Direction: Outbound
  3422. AllowIt
  3423.  
  3424. DefaultState: 1
  3425. RuleName: Microsoft NetMeeting Conference
  3426. Protocol: UDP
  3427. RemotePort: 49600-49700
  3428. AllowIt
  3429.  
  3430. DefaultState: 1
  3431. RuleName: Microsoft NetMeeting LDAP connection
  3432. Protocol: TCP
  3433. RemotePort: 3268, 389
  3434. Direction: Outbound
  3435. AllowIt
  3436.  
  3437. DefaultState: 1
  3438. RuleName: Microsoft NetMeeting HTTP connection
  3439. Protocol: TCP
  3440. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3441. Direction: Outbound
  3442. AllowIt
  3443.  
  3444. [Microsoft Chat]
  3445. VisibleState: 0
  3446. Exe:
  3447. Microsoft Chat, cchat.exe
  3448. DefaultState: 1
  3449. RuleName: Microsoft Chat connection
  3450. Protocol: TCP
  3451. RemotePort: 6667
  3452. Direction: Outbound
  3453. AllowIt
  3454.  
  3455. DefaultState: 1
  3456. RuleName: Microsoft Chat AUTH connection
  3457. Protocol: TCP
  3458. RemotePort: 113
  3459. Direction: Inbound
  3460. AllowIt
  3461.  
  3462. [SMSTation]
  3463. VisibleState: 0
  3464. Exe:
  3465. SMSTation, smstation.exe
  3466. DefaultState: 1
  3467. RuleName: SMSTation connection
  3468. Protocol: TCP
  3469. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3470. Direction: Outbound
  3471. AllowIt
  3472.  
  3473. [Yahoo! Messenger]
  3474. VisibleState: 0
  3475. Exe:
  3476. Yahoo! Messenger, ypager.exe
  3477. DefaultState: 1
  3478. RuleName: Yahoo! Messenger HTTP connection
  3479. Protocol: TCP
  3480. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3481. Direction: Outbound
  3482. AllowIt
  3483.  
  3484. DefaultState: 1
  3485. RuleName: Yahoo! Messenger Send Mail
  3486. Protocol: TCP
  3487. RemotePort: 25
  3488. Direction: Outbound
  3489. AllowIt
  3490.  
  3491. DefaultState: 1
  3492. RuleName: Yahoo! Messenger Login
  3493. Protocol: TCP
  3494. RemotePort: 23, 5050
  3495. Direction: Outbound
  3496. AllowIt
  3497.  
  3498. DefaultState: 1
  3499. RuleName: Yahoo! Messenger Conference TCP connection
  3500. Protocol: TCP
  3501. RemotePort: 5000, 5001
  3502. Direction: Outbound
  3503. AllowIt
  3504.  
  3505. DefaultState: 1
  3506. RuleName: Yahoo! Messenger Conference UDP connection
  3507. Protocol: UDP
  3508. LocalPort: 5000
  3509. AllowIt
  3510.  
  3511. DefaultState: 1
  3512. RuleName: Yahoo! Messenger Call Center
  3513. Protocol: UDP
  3514. RemotePort: 6801
  3515. AllowIt
  3516.  
  3517. DefaultState: 1
  3518. RuleName: Yahoo! Messenger Call Center
  3519. Protocol: UDP
  3520. LocalPort: 5000, 5055
  3521. AllowIt
  3522.  
  3523. DefaultState: 1
  3524. RuleName: Yahoo! Messenger Call Center
  3525. Protocol: TCP
  3526. RemotePort: 7800-7825
  3527. Direction: Outbound
  3528. AllowIt
  3529.  
  3530. DefaultState: 1
  3531. RuleName: Yahoo! Messenger WebCam
  3532. Protocol: TCP
  3533. RemotePort: 5100
  3534. Direction: Outbound
  3535. AllowIt
  3536.  
  3537. [Yahoo! AutoUpdater]
  3538. VisibleState: 0
  3539. Exe:
  3540. Yahoo! AutoUpdater, yupdater.exe
  3541. DefaultState: 1
  3542. RuleName: Yahoo! Messenger AutoUpdater
  3543. Protocol: TCP
  3544. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3545. Direction: Outbound
  3546. AllowIt
  3547.  
  3548. ; Antiviral
  3549.  
  3550. [Dr. Web Update]
  3551. VisibleState: 0
  3552. Exe:
  3553. Dr. Web Update, drwebupw.exe
  3554. DefaultState: 1
  3555. RuleName: Dr. Web Update
  3556. Protocol: TCP
  3557. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3558. Direction: Outbound
  3559. AllowIt
  3560.  
  3561. [SpIDer Mail]
  3562. VisibleState: 0
  3563. Exe:
  3564. SpIDer Mail, spiderml.exe
  3565. DefaultState: 1
  3566. RuleName: SpIDer Mail connection
  3567. Protocol: TCP
  3568. RemotePort: 110, 
  3569. Direction: Outbound
  3570. AllowIt
  3571.  
  3572. [NOD32 AntiVirus Control Centre]
  3573. VisibleState: 0
  3574. Exe:
  3575. NOD32 AntiVirus Control Centre, nod32cc.exe
  3576. DefaultState: 1
  3577. RuleName: Update NOD32 engine and virus definitions
  3578. Protocol: TCP
  3579. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3580. Direction: Outbound
  3581. AllowIt
  3582.  
  3583. [NOD32 AntiVirus Email Scanner]
  3584. VisibleState: 0
  3585. Exe:
  3586. NOD32 AntiVirus Email Scanner, pop3scan.exe
  3587. DefaultState: 1
  3588. RuleName: Scan incoming mail for viruses
  3589. Protocol: TCP
  3590. RemotePort: 110
  3591. Direction: Outbound
  3592. AllowIt
  3593.  
  3594. [SymantecÆs Common Client Application]
  3595. VisibleState: 0
  3596. Exe:
  3597. SymantecÆs Common Client Application, ccapp.exe
  3598. DefaultState: 1
  3599. RuleName: Scan incoming mail for viruses
  3600. Protocol: TCP
  3601. RemotePort: 25, 110, 143, 995
  3602. Direction: Outbound
  3603. AllowIt
  3604.  
  3605. [Symantec LiveUpdate]
  3606. VisibleState: 0
  3607. Exe:
  3608. Symantec LiveUpdate, lucomserver.exe
  3609. DefaultState: 1
  3610. RuleName: Symantec LiveUpdate HTTP
  3611. Protocol: TCP
  3612. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3613. Direction: Outbound
  3614. AllowIt
  3615.  
  3616. DefaultState: 1
  3617. RuleName: Symantec LiveUpdate FTP
  3618. Protocol: TCP
  3619. RemotePort: 21
  3620. Direction: Outbound
  3621. ActivateSI AlgFtp 
  3622. AllowIt
  3623.  
  3624. [KAV Updater]
  3625. VisibleState: 0
  3626. Exe:
  3627. KAV Updater, avpupd.exe
  3628. Kaspersky Anti-Virus Service, kavsvc.exe
  3629. DefaultState: 1
  3630. RuleName: KAV Updater HTTP connection
  3631. Protocol: TCP
  3632. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3633. Direction: Outbound
  3634. AllowIt
  3635.  
  3636. DefaultState: 1
  3637. RuleName: KAV Updater FTP connection
  3638. Protocol: TCP
  3639. RemotePort: 21
  3640. Direction: Outbound
  3641. ActivateSI AlgFtp 
  3642. AllowIt
  3643.  
  3644. [McAfee Update]
  3645. VisibleState: 0
  3646. Exe:
  3647. McAfee VirusScan Update, mupdate.exe
  3648. DefaultState: 1
  3649. RuleName: McAfee Update
  3650. Protocol: TCP
  3651. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3652. Direction: Outbound
  3653. AllowIt
  3654.  
  3655. ; Net Utilites
  3656.  
  3657. [NetLab]
  3658. VisibleState: 0
  3659. Exe:
  3660. NetLab, netlab.exe
  3661. DefaultState: 1
  3662. RuleName: Get Time NetLab connection
  3663. Protocol: TCP
  3664. RemotePort: 37
  3665. Direction: Outbound
  3666. AllowIt
  3667.  
  3668. DefaultState: 1
  3669. RuleName: NetLab WhoIs Connection
  3670. Protocol: TCP
  3671. RemotePort: 43
  3672. Direction: Outbound
  3673. AllowIt
  3674.  
  3675. DefaultState: 1
  3676. RuleName: NetLab Quote Connection
  3677. Protocol: TCP
  3678. RemotePort: 17
  3679. Direction: Outbound
  3680. AllowIt
  3681.  
  3682. DefaultState: 1
  3683. RuleName: NetLab Finger Connection
  3684. Protocol: TCP
  3685. RemotePort: 79
  3686. Direction: Outbound
  3687. AllowIt
  3688.  
  3689. [SmartWhois]
  3690. VisibleState: 0
  3691. Exe:
  3692. SmartWhois, sw3.exe
  3693. SmartWhois, sw.exe
  3694. DefaultState: 1
  3695. RuleName: SmartWhoIs Connection
  3696. Protocol: TCP
  3697. RemotePort: 43
  3698. Direction: Outbound
  3699. AllowIt
  3700.  
  3701. [NeoTrace]
  3702. VisibleState: 0
  3703. Exe:
  3704. NeoTrace, neotrace.exe
  3705. DefaultState: 1
  3706. RuleName: Neotrace HTTP
  3707. Protocol: TCP
  3708. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3709. Direction: Outbound
  3710. AllowIt
  3711.  
  3712. DefaultState: 1
  3713. RuleName: Neotrace WhoIs
  3714. Protocol: TCP
  3715. RemotePort: 43
  3716. Direction: Outbound
  3717. AllowIt
  3718.  
  3719. [VisualRoute] 
  3720. VisibleState: 0
  3721. Exe:
  3722. VisualRoute, visualroute.exe
  3723. DefaultState: 1
  3724. RuleName: VisualRoute HTTP connection
  3725. Protocol: TCP
  3726. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  3727. Direction: Outbound
  3728. AllowIt
  3729.  
  3730. DefaultState: 1 
  3731. RuleName: VisualRoute WhoIs connection
  3732. Protocol: TCP 
  3733. RemotePort: 43 
  3734. Direction: Outbound 
  3735. AllowIt 
  3736.  
  3737. ; Time Synchronizers
  3738.  
  3739. [Chameleon Clock]
  3740. VisibleState: 0
  3741. Exe:
  3742. Chameleon Clock, chamclock.exe
  3743. DefaultState: 1
  3744. RuleName: Chameleon Clock time connection
  3745. Protocol: UDP
  3746. RemotePort: 123
  3747. AllowIt
  3748.  
  3749. [Advanced System Agent]
  3750. VisibleState: 0
  3751. Exe:
  3752. Advanced System Agent, asa_ext.exe
  3753. DefaultState: 1
  3754. RuleName: Advanced System Agent time connection
  3755. Protocol: UDP
  3756. RemotePort: 123
  3757. AllowIt
  3758.  
  3759. [12Ghosts Synchronize]
  3760. VisibleState: 0
  3761. Exe:
  3762. 12Ghosts Synchronize, 12sync.exe
  3763. DefaultState: 1
  3764. RuleName: 12Ghosts Synchronize SNTP connection
  3765. Protocol: UDP
  3766. RemotePort: 123
  3767. AllowIt
  3768.  
  3769. DefaultState: 1
  3770. RuleName: 12Ghosts Synchronize time connection
  3771. Protocol: UDP
  3772. RemotePort: 37
  3773. AllowIt
  3774.  
  3775. DefaultState: 1
  3776. RuleName: 12Ghosts Synchronize time connection
  3777. Protocol: TCP
  3778. RemotePort: 37
  3779. Direction: Outbound
  3780. AllowIt
  3781.  
  3782. [1st Atomic Time]
  3783. VisibleState: 0
  3784. Exe:
  3785. 1st Atomic Time, 1stat.exe
  3786. DefaultState: 1
  3787. RuleName: 1st Atomic Time SNTP connection
  3788. Protocol: UDP
  3789. RemotePort: 123
  3790. AllowIt
  3791.  
  3792. DefaultState: 1
  3793. RuleName: 1st Atomic Time daytime connection
  3794. Protocol: TCP
  3795. RemotePort: 13
  3796. Direction: Outbound
  3797. AllowIt
  3798.  
  3799. [Absolute Time Corrector]
  3800. VisibleState: 0
  3801. Exe:
  3802. Absolute Time Corrector, atc.exe
  3803. DefaultState: 1
  3804. RuleName: Absolute Time Corrector connection
  3805. Protocol: TCP
  3806. RemotePort: 37
  3807. Direction: Outbound
  3808. AllowIt
  3809.  
  3810. [AceClock Pro]
  3811. VisibleState: 0
  3812. Exe:
  3813. AceClock Pro, aceclock.exe
  3814. DefaultState: 1
  3815. RuleName: AceClock Pro SNTP connection
  3816. Protocol: UDP
  3817. RemotePort: 123
  3818. AllowIt
  3819.  
  3820. DefaultState: 1
  3821. RuleName: AceClock Pro time connection
  3822. Protocol: TCP
  3823. RemotePort: 37
  3824. Direction: Outbound
  3825. AllowIt
  3826.  
  3827. [Atom Timer]
  3828. VisibleState: 0
  3829. Exe:
  3830. Atom Timer, atomt.exe
  3831. DefaultState: 1
  3832. RuleName: Atom Timer daytime connection
  3833. Protocol: TCP
  3834. RemotePort: 13
  3835. Direction: Outbound
  3836. AllowIt
  3837.  
  3838. [AtomSync]
  3839. VisibleState: 0
  3840. Exe:
  3841. AtomSync, atomuhr.exe
  3842. DefaultState: 1
  3843. RuleName: AtomSync SNTP connection
  3844. Protocol: UDP
  3845. RemotePort: 123
  3846. AllowIt
  3847.  
  3848. [Attache Transparent Clock]
  3849. VisibleState: 0
  3850. Exe:
  3851. Attache Clock, attacheclock.exe
  3852. Attache Clock, configtool.exe
  3853. DefaultState: 1
  3854. RuleName: Attache Clock SNTP connection
  3855. Protocol: UDP
  3856. RemotePort: 123
  3857. AllowIt
  3858.  
  3859. [Desktop Atomic Clock]
  3860. VisibleState: 0
  3861. Exe:
  3862. Desktop Atomic Clock, dac.exe
  3863. DefaultState: 1
  3864. RuleName: Desktop Atomic Clock daytime connection
  3865. Protocol: TCP
  3866. RemotePort: 13
  3867. Direction: Outbound
  3868. AllowIt
  3869.  
  3870. [DS Clock]
  3871. VisibleState: 0
  3872. Exe:
  3873. DS Clock, dsclock.exe
  3874. DefaultState: 1
  3875. RuleName: DS Clock SNTP connection
  3876. Protocol: UDP
  3877. RemotePort: 123
  3878. AllowIt
  3879.  
  3880. [Easy Time]
  3881. VisibleState: 0
  3882. Exe:
  3883. Easy Time, easytime.exe
  3884. DefaultState: 1
  3885. RuleName: Easy Time SNTP connection
  3886. Protocol: UDP
  3887. RemotePort: 123
  3888. AllowIt
  3889.  
  3890. [EZTimeSync]
  3891. VisibleState: 0
  3892. Exe:
  3893. EZTimeSync, eztimesync.exe
  3894. DefaultState: 1
  3895. RuleName: EZTimeSync connection
  3896. Protocol: TCP
  3897. RemotePort: 37
  3898. Direction: Outbound
  3899. AllowIt
  3900.  
  3901. [Dimension 4]
  3902. VisibleState: 0
  3903. Exe:
  3904. Dimension 4, d4.exe
  3905. DefaultState: 1
  3906. RuleName: Dimension 4 SNTP connection
  3907. Protocol: UDP
  3908. RemotePort: 123
  3909. AllowIt
  3910.  
  3911. DefaultState: 1
  3912. RuleName: Dimension 4 time connection
  3913. Protocol: TCP
  3914. RemotePort: 37
  3915. Direction: Outbound
  3916. AllowIt
  3917.  
  3918. DefaultState: 1
  3919. RuleName: Dimension 4 time connection
  3920. Protocol: UDP
  3921. RemotePort: 37
  3922. AllowIt
  3923.  
  3924. [NMEATime]
  3925. VisibleState: 0
  3926. Exe:
  3927. NMEATime, nmeatime.exe
  3928. DefaultState: 1
  3929. RuleName: NMEATime daytime connection
  3930. Protocol: TCP
  3931. RemotePort: 13
  3932. Direction: Outbound
  3933. AllowIt
  3934.  
  3935. DefaultState: 1
  3936. RuleName: NMEATime SNTP connection
  3937. Protocol: UDP
  3938. RemotePort: 123
  3939. AllowIt
  3940.  
  3941. [SolidSync]
  3942. VisibleState: 0
  3943. Exe:
  3944. SolidSync, solidsync.exe
  3945. DefaultState: 1
  3946. RuleName: SolidSync time connection
  3947. Protocol: TCP
  3948. RemotePort: 37
  3949. Direction: Outbound
  3950. AllowIt
  3951.  
  3952. [Tardis]
  3953. VisibleState: 0
  3954. Exe:
  3955. Tardis, tardis.exe
  3956. DefaultState: 1
  3957. RuleName: Tardis SNTP connection
  3958. Protocol: UDP
  3959. RemotePort: 123
  3960. AllowIt
  3961.  
  3962. DefaultState: 1
  3963. RuleName: Tardis time connection
  3964. Protocol: UDP
  3965. RemotePort: 37
  3966. AllowIt
  3967.  
  3968. DefaultState: 1
  3969. RuleName: Tardis time connection
  3970. Protocol: TCP
  3971. RemotePort: 37
  3972. Direction: Outbound
  3973. AllowIt
  3974.  
  3975. DefaultState: 1
  3976. RuleName: Tardis daytime connection
  3977. Protocol: TCP
  3978. RemotePort: 13
  3979. Direction: Outbound
  3980. AllowIt
  3981.  
  3982. DefaultState: 1
  3983. RuleName: Tardis HTTP connection
  3984. Protocol: TCP
  3985. RemotePort: 80
  3986. Direction: Outbound
  3987. AllowIt
  3988.  
  3989. [Tech-Pro World Clock]
  3990. VisibleState: 0
  3991. Exe:
  3992. Tech-Pro World Clock, worldclock.exe
  3993. DefaultState: 1
  3994. RuleName: Tech-Pro World Clock connection
  3995. Protocol: TCP
  3996. RemotePort: 37
  3997. Direction: Outbound
  3998. AllowIt
  3999.  
  4000. [TimeSync]
  4001. VisibleState: 0
  4002. Exe:
  4003. TimeSync, timesync.exe
  4004. DefaultState: 1
  4005. RuleName: TimeSync time connection
  4006. Protocol: TCP
  4007. RemotePort: 37
  4008. Direction: Outbound
  4009. AllowIt
  4010.  
  4011. [Time Sync Pro]
  4012. VisibleState: 0
  4013. Exe:
  4014. Time Sync Pro, timesync.exe
  4015. DefaultState: 1
  4016. RuleName: Time Sync Pro SNTP connection
  4017. Protocol: UDP
  4018. RemotePort: 123
  4019. AllowIt
  4020.  
  4021. [TSync]
  4022. VisibleState: 0
  4023. Exe:
  4024. TSync, tsync.exe
  4025. DefaultState: 1
  4026. RuleName: TSync time connection
  4027. Protocol: TCP
  4028. RemotePort: 37
  4029. Direction: Outbound
  4030. AllowIt
  4031.  
  4032. [WebTime]
  4033. VisibleState: 0
  4034. Exe:
  4035. WebTime, webtime.exe
  4036. DefaultState: 1
  4037. RuleName: WebTime time connection
  4038. Protocol: TCP
  4039. RemotePort: 37
  4040. Direction: Outbound
  4041. AllowIt
  4042.  
  4043. [YATS32]
  4044. VisibleState: 0
  4045. Exe:
  4046. YATS32, yats32.exe
  4047. DefaultState: 1
  4048. RuleName: YATS32 SNTP connection
  4049. Protocol: UDP
  4050. RemotePort: 123
  4051. AllowIt
  4052.  
  4053. ; Multimedia
  4054.  
  4055. [Ashampoo Media Player+]
  4056. VisibleState: 0
  4057. Exe:
  4058. Ashampoo Media Player+, ampplus.exe
  4059. DefaultState: 1
  4060. RuleName: Ashampoo Media Player+ Info Channel
  4061. Protocol: TCP
  4062. RemoteHost: 195.125.111.109
  4063. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4064. Direction: Outbound
  4065. AllowIt
  4066.  
  4067. [DivX Player]
  4068. VisibleState: 0
  4069. Exe:
  4070. DivX Player, DivX Player 2.0 Alpha.exe
  4071. DefaultState: 1
  4072. RuleName: DivX Player HTTP connection
  4073. Protocol: TCP
  4074. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4075. Direction: Outbound
  4076. AllowIt
  4077.  
  4078. [MusicMatch Jukebox]
  4079. VisibleState: 0
  4080. Exe:
  4081. MusicMatch Jukebox, mmjb.exe
  4082. DefaultState: 1
  4083. RuleName: MusicMatch Jukebox HTTP connection
  4084. Protocol: TCP
  4085. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4086. Direction: Outbound
  4087. AllowIt
  4088.  
  4089. [MusicMatch Jukebox Update]
  4090. VisibleState: 0
  4091. Exe:
  4092. MusicMatch Jukebox Update, mmupdatemgr.exe
  4093. DefaultState: 1
  4094. RuleName: MusicMatch Jukebox Update HTTP connection
  4095. Protocol: TCP
  4096. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4097. Direction: Outbound
  4098. AllowIt
  4099.  
  4100. [Sonique]
  4101. VisibleState: 0
  4102. Exe:
  4103. Sonique, sqstart.exe
  4104. Sonique, Sonique.exe
  4105. DefaultState: 1
  4106. RuleName: Sonique HTTP connection
  4107. Protocol: TCP
  4108. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4109. Direction: Outbound
  4110. AllowIt
  4111.  
  4112. [WinAmp]
  4113. VisibleState: 0
  4114. Exe:
  4115. WinAmp, winamp.exe
  4116. WinAmp, studio.exe
  4117. DefaultState: 1
  4118. RuleName: WinAmp Connection
  4119. Protocol: TCP
  4120. RemotePort: 8000-8900
  4121. Direction: Outbound
  4122. AllowIt
  4123.  
  4124. DefaultState: 1
  4125. RuleName: WinAmp MiniBrowser Connection
  4126. Protocol: TCP
  4127. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4128. Direction: Outbound
  4129. AllowIt
  4130.  
  4131. [Windows Media Player]
  4132. VisibleState: 0
  4133. Exe:
  4134. Windows Media Player, mplayer2.exe
  4135. Windows Media Player, wmplayer.exe
  4136. DefaultState: 1
  4137. RuleName: Windows Media Player HTTP connection
  4138. Protocol: TCP
  4139. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4140. Direction: Outbound
  4141. AllowIt
  4142.  
  4143. DefaultState: 1
  4144. RuleName: Windows Media Player connection
  4145. Protocol: TCP
  4146. RemotePort: 1755, 8000, 8001
  4147. Direction: Outbound
  4148. AllowIt
  4149.  
  4150. [CDex]
  4151. VisibleState: 0
  4152. Exe:
  4153. CDex, cdex.exe
  4154. DefaultState: 1
  4155. RuleName: CDex HTTP connection
  4156. Protocol: TCP
  4157. RemotePort: 80-83, 443, 888, 1080, 3128, 8080, 8081, 8088, 11523
  4158. Direction: Outbound
  4159. AllowIt
  4160.  
  4161. [QuickTime]
  4162. VisibleState: 0
  4163. Exe:
  4164. QuickTime Player, quicktimeplayer.exe
  4165. DefaultState: 1
  4166. RuleName: QuickTime Player Connection
  4167. Protocol: TCP
  4168. RemotePort: 554
  4169. Direction: Outbound
  4170. AllowIt
  4171.  
  4172. DefaultState: 1
  4173. RuleName: QuickTime Player Connection
  4174. Protocol: UDP
  4175. RemotePort: 2001
  4176. AllowIt
  4177.  
  4178. DefaultState: 1
  4179. RuleName: QuickTime Player HTTP Connection
  4180. Protocol: TCP
  4181. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4182. Direction: Outbound
  4183. AllowIt
  4184.  
  4185. [RealPlayer]
  4186. VisibleState: 0
  4187. Exe:
  4188. RealPlayer, realplay.exe
  4189. DefaultState: 1
  4190. RuleName: RealPlayer Connection
  4191. Protocol: TCP
  4192. RemotePort: 554, 7070, 7071
  4193. Direction: Outbound
  4194. AllowIt
  4195.  
  4196. DefaultState: 1
  4197. RuleName: RealPlayer HTTP Connection
  4198. Protocol: TCP
  4199. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4200. Direction: Outbound
  4201. AllowIt
  4202.  
  4203. DefaultState: 1
  4204. RuleName: RealPlayer Inbound UDP Connection
  4205. Protocol: UDP
  4206. LocalPort: 6770-32000
  4207. AllowIt
  4208.  
  4209. DefaultState: 1
  4210. RuleName: RealPlayer Outbound UDP Connection
  4211. Protocol: UDP
  4212. RemotePort: 6770-32000
  4213. AllowIt
  4214.  
  4215. [RealNetworks Event Launcher]
  4216. VisibleState: 0
  4217. Exe:
  4218. RealNetworks Event Launcher, realevent.exe
  4219. DefaultState: 1
  4220. RuleName: RealNetworks Event Launcher HTTP Connection
  4221. Protocol: TCP
  4222. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4223. Direction: Outbound
  4224. AllowIt
  4225.  
  4226. ; Internet Search
  4227.  
  4228. [Copernic]
  4229. VisibleState: 0
  4230. Exe:
  4231. Copernic, copernicsvr.exe
  4232. Copernic, copernic.exe
  4233. DefaultState: 1
  4234. RuleName: Copernic search connection
  4235. Protocol: TCP
  4236. RemotePort: 80
  4237. Direction: Outbound
  4238. AllowIt
  4239.  
  4240. ; P2P
  4241.  
  4242. [eMule - Default]
  4243. VisibleState: 0
  4244. Exe:
  4245. eMule, emule.exe
  4246. DefaultState: 1
  4247. RuleName: eMule - Client to Client Source Exchange
  4248. Protocol: TCP
  4249. LocalPort: 4662
  4250. Direction: Inbound
  4251. AllowIt
  4252.  
  4253. DefaultState: 1
  4254. RuleName: eMule - Client to Client Source Exchange
  4255. Protocol: TCP
  4256. RemotePort: 4662
  4257. Direction: Outbound
  4258. AllowIt
  4259.  
  4260. DefaultState: 1
  4261. RuleName: eMule - Queue Rating, File Reask Ping
  4262. Protocol: UDP
  4263. LocalPort: 4672
  4264. AllowIt
  4265.  
  4266. DefaultState: 1
  4267. RuleName: eMule - Queue Rating, File Reask Ping
  4268. Protocol: UDP
  4269. RemotePort: 4672
  4270. AllowIt
  4271.  
  4272. DefaultState: 1
  4273. RuleName: eMule - Connection to server
  4274. Protocol: TCP
  4275. RemotePort: 4661
  4276. Direction: Outbound
  4277. AllowIt
  4278.  
  4279. DefaultState: 1
  4280. RuleName: eMule - Source asking on servers
  4281. Protocol: UDP
  4282. RemotePort: 4665
  4283. AllowIt
  4284.  
  4285. DefaultState: 1
  4286. RuleName: eMule - Webserver
  4287. Protocol: TCP
  4288. LocalPort: 4711
  4289. Direction: Inbound
  4290. AllowIt
  4291.  
  4292. DefaultState: 1
  4293. RuleName: eMule HTTP connection
  4294. Protocol: TCP
  4295. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4296. Direction: Outbound
  4297. AllowIt
  4298.  
  4299. [iMesh]
  4300. VisibleState: 0
  4301. Exe:
  4302. iMesh, imeshclient.exe
  4303. DefaultState: 1
  4304. RuleName: iMesh connection
  4305. Protocol: TCP
  4306. RemotePort: 4000-5000
  4307. Direction: Outbound
  4308. AllowIt
  4309.  
  4310. DefaultState: 1
  4311. RuleName: iMesh HTTP connection
  4312. Protocol: TCP
  4313. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4314. Direction: Outbound
  4315. AllowIt
  4316.  
  4317. [KaZaA Media Desktop]
  4318. VisibleState: 0
  4319. Exe:
  4320. KaZaA Media Desktop, kazaa.exe
  4321. DefaultState: 1
  4322. RuleName: KaZaA Media Desktop outgoing connection
  4323. Protocol: TCP
  4324. RemotePort: 1214
  4325. Direction: Outbound
  4326. AllowIt
  4327.  
  4328. DefaultState: 1
  4329. RuleName: KaZaA Media Desktop incoming connection
  4330. Protocol: TCP
  4331. LocalPort: 1214
  4332. Direction: Inbound
  4333. AllowIt
  4334.  
  4335. DefaultState: 1
  4336. RuleName: KaZaA Media Desktop HTTP connection
  4337. Protocol: TCP
  4338. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4339. Direction: Outbound
  4340. AllowIt
  4341.  
  4342. [Morpheus]
  4343. VisibleState: 0
  4344. Exe:
  4345. Morpheus, morpheus.exe
  4346. Morpheus, morpheusp.exe
  4347. DefaultState: 1
  4348. RuleName: Morpheus outgoing connection
  4349. Protocol: TCP
  4350. RemotePort: 1214
  4351. Direction: Outbound
  4352. AllowIt
  4353.  
  4354. DefaultState: 1
  4355. RuleName: Morpheus incoming connection
  4356. Protocol: TCP
  4357. LocalPort: 1214
  4358. Direction: Inbound
  4359. AllowIt
  4360.  
  4361. DefaultState: 1
  4362. RuleName: Morpheus HTTP connection
  4363. Protocol: TCP
  4364. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4365. Direction: Outbound
  4366. AllowIt
  4367.  
  4368. [WinMX]
  4369. VisibleState: 0
  4370. Exe:
  4371. WinMX, winmx.exe
  4372. DefaultState: 1
  4373. RuleName: WinMX server connection
  4374. Protocol: TCP
  4375. RemotePort: 5690, 6257, 6699, 7729-7735, 7940-7952
  4376. Direction: Outbound
  4377. AllowIt
  4378.  
  4379. DefaultState: 1
  4380. RuleName: WinMX incoming UDP connection
  4381. Protocol: UDP
  4382. RemotePort: 6257
  4383. AllowIt
  4384.  
  4385. DefaultState: 1
  4386. RuleName: WinMX incoming TCP connection
  4387. Protocol: TCP
  4388. LocalPort: 6699
  4389. Direction: Inbound
  4390. AllowIt
  4391.  
  4392. DefaultState: 1
  4393. RuleName: WinMX HTTP connection
  4394. Protocol: TCP
  4395. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4396. Direction: Outbound
  4397. AllowIt
  4398.  
  4399. [Direct Connect]
  4400. VisibleState: 0
  4401. Exe:
  4402. Direct Connect, direct connect.exe
  4403. DefaultState: 1
  4404. RuleName: Direct Connect outbound connection
  4405. Protocol: TCP
  4406. RemotePort: 411
  4407. Direction: Outbound
  4408. AllowIt
  4409.  
  4410. DefaultState: 1
  4411. RuleName: Direct Connect incoming connection
  4412. Protocol: TCP
  4413. LocalPort: 412
  4414. Direction: Inbound
  4415. AllowIt
  4416.  
  4417. DefaultState: 1
  4418. RuleName: Direct Connect HTTP connection
  4419. Protocol: TCP
  4420. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4421. Direction: Outbound
  4422. AllowIt
  4423.  
  4424. [AudioGalaxy]
  4425. VisibleState: 0
  4426. Exe:
  4427. AudioGalaxy, agsatellite.exe
  4428. DefaultState: 1
  4429. RuleName: AudioGalaxy outgoing connection
  4430. Protocol: TCP
  4431. RemotePort: 21, 1117-5190, 41000 - 50000
  4432. Direction: Outbound
  4433. AllowIt
  4434.  
  4435. DefaultState: 1
  4436. RuleName: AudioGalaxy incoming connection
  4437. Protocol: TCP
  4438. LocalPort: 21, 1117-5190, 41000 - 50000
  4439. Direction: Inbound
  4440. AllowIt
  4441.  
  4442. [BearShare] 
  4443. VisibleState: 0
  4444. Exe:
  4445. Bearshare, bearshare.exe
  4446. Bearshare, bearsharepro.exe
  4447. DefaultState: 1
  4448. RuleName: BearShare HTTP connection
  4449. Protocol: TCP
  4450. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4451. Direction: Outbound
  4452. AllowIt
  4453.  
  4454. DefaultState: 1
  4455. RuleName: BearShare outgoing connection
  4456. Protocol: TCP
  4457. RemotePort: 6346-6349
  4458. Direction: Outbound
  4459. AllowIt
  4460.  
  4461. DefaultState: 1
  4462. RuleName: BearShare incoming connection
  4463. Protocol: TCP
  4464. LocalPort: 6346
  4465. Direction: Inbound
  4466. AllowIt
  4467.  
  4468. [Gnotella] 
  4469. VisibleState: 0
  4470. Exe:
  4471. Gnotella, gnotella.exe
  4472. DefaultState: 1
  4473. RuleName: Gnotella HTTP connection
  4474. Protocol: TCP
  4475. RemotePort: 80, 3128, 8080, 8081, 8088
  4476. Direction: Outbound
  4477. AllowIt
  4478.  
  4479. DefaultState: 1
  4480. RuleName: Gnotella outgoing connection
  4481. Protocol: TCP
  4482. RemotePort: 6346-6352
  4483. Direction: Outbound
  4484. AllowIt
  4485.  
  4486. DefaultState: 1
  4487. RuleName: Gnotella incoming connection
  4488. Protocol: TCP
  4489. LocalPort: 6346
  4490. Direction: Inbound
  4491. AllowIt
  4492.  
  4493. [Soulseek] 
  4494. VisibleState: 0
  4495. Exe:
  4496. Soulseek, slsk.exe
  4497. DefaultState: 1
  4498. RuleName: Soulseek HTTP connection
  4499. Protocol: TCP
  4500. RemotePort: 80, 3128, 8080, 8081, 8088
  4501. Direction: Outbound
  4502. AllowIt
  4503.  
  4504. DefaultState: 1
  4505. RuleName: Soulseek HTTPS connection
  4506. Protocol: TCP
  4507. RemotePort: 443
  4508. Direction: Outbound
  4509. AllowIt
  4510.  
  4511. DefaultState: 1
  4512. RuleName: Soulseek connection
  4513. Protocol: TCP
  4514. RemotePort: 2234-2240, 5534, 6997
  4515. Direction: Outbound
  4516. AllowIt
  4517.  
  4518. DefaultState: 1
  4519. RuleName: Soulseek incoming connection
  4520. Protocol: TCP
  4521. RemotePort: 2234
  4522. Direction: Inbound
  4523. AllowIt
  4524.  
  4525. [Blubster] 
  4526. VisibleState: 0
  4527. Exe:
  4528. Blubster, blubster.exe
  4529. DefaultState: 1
  4530. RuleName: Blubster HTTP connection
  4531. Protocol: TCP
  4532. RemotePort: 80, 3128, 8080, 8081, 8088
  4533. Direction: Outbound
  4534. AllowIt
  4535.  
  4536. DefaultState: 1
  4537. RuleName: Blubster outgoing connection
  4538. Protocol: UDP
  4539. RemotePort: 41170
  4540. AllowIt
  4541.  
  4542. DefaultState: 1
  4543. RuleName: Blubster incoming connection
  4544. Protocol: UDP
  4545. LocalPort: 41170
  4546. AllowIt
  4547.  
  4548. ; Storage
  4549.  
  4550. [Storage]
  4551. VisibleState: 0
  4552. Exe:
  4553. Filo by i-drive, idriveproxy.exe
  4554. DefaultState: 1
  4555. RuleName:  i-drive storage server
  4556. Protocol: TCP
  4557. RemotePort: 443
  4558. Direction: Outbound
  4559. AllowIt
  4560.  
  4561. ; Microsoft
  4562.  
  4563. [Microsoft Excel]
  4564. VisibleState: 0
  4565. Exe:
  4566. Microsoft Excel, excel.exe
  4567. DefaultState: 1
  4568. RuleName: Microsoft Excel HTTP
  4569. Protocol: TCP
  4570. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4571. Direction: Outbound
  4572. AllowIt
  4573.  
  4574. DefaultState: 1
  4575. RuleName: Microsoft Excel FTP
  4576. Protocol: TCP
  4577. RemotePort: 21
  4578. Direction: Outbound
  4579. ActivateSI AlgFtp 
  4580. AllowIt
  4581.  
  4582. DefaultState: 1
  4583. RuleName: Microsoft Excel E-Mail
  4584. Protocol: TCP
  4585. RemotePort: 25, 110
  4586. Direction: Outbound
  4587. AllowIt
  4588.  
  4589. DefaultState: 1
  4590. RuleName: Microsoft Excel LDAP
  4591. Protocol: TCP
  4592. RemotePort: 3268, 389
  4593. Direction: Outbound
  4594. AllowIt
  4595.  
  4596. DefaultState: 1
  4597. RuleName: Microsoft Excel MSSQL
  4598. Protocol: TCP
  4599. RemotePort: 1433, 1434
  4600. Direction: Outbound
  4601. AllowIt
  4602.  
  4603. [Microsoft Word]
  4604. VisibleState: 0
  4605. Exe:
  4606. Microsoft Word, winword.exe
  4607. DefaultState: 1
  4608. RuleName: Microsoft Word HTTP
  4609. Protocol: TCP
  4610. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4611. Direction: Outbound
  4612. AllowIt
  4613.  
  4614. DefaultState: 1
  4615. RuleName: Microsoft Word FTP
  4616. Protocol: TCP
  4617. RemotePort: 21
  4618. Direction: Outbound
  4619. ActivateSI AlgFtp 
  4620. AllowIt
  4621.  
  4622. DefaultState: 1
  4623. RuleName: Microsoft Word E-Mail
  4624. Protocol: TCP
  4625. RemotePort: 25, 110
  4626. Direction: Outbound
  4627. AllowIt
  4628.  
  4629. DefaultState: 1
  4630. RuleName: Microsoft Word LDAP
  4631. Protocol: TCP
  4632. RemotePort: 3268, 389
  4633. Direction: Outbound
  4634. AllowIt
  4635.  
  4636. [Microsoft Access]
  4637. VisibleState: 0
  4638. Exe:
  4639. Microsoft Access, msaccess.exe
  4640. DefaultState: 1
  4641. RuleName: Microsoft Access HTTP
  4642. Protocol: TCP
  4643. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4644. Direction: Outbound
  4645. AllowIt
  4646.  
  4647. DefaultState: 1
  4648. RuleName: Microsoft Access FTP
  4649. Protocol: TCP
  4650. RemotePort: 21
  4651. Direction: Outbound
  4652. ActivateSI AlgFtp 
  4653. AllowIt
  4654.  
  4655. DefaultState: 1
  4656. RuleName: Microsoft Access E-Mail
  4657. Protocol: TCP
  4658. RemotePort: 25, 110
  4659. Direction: Outbound
  4660. AllowIt
  4661.  
  4662. DefaultState: 1
  4663. RuleName: Microsoft Access LDAP
  4664. Protocol: TCP
  4665. RemotePort: 3268, 389
  4666. Direction: Outbound
  4667. AllowIt
  4668.  
  4669. ; Word Processing
  4670.  
  4671. [Adobe Acrobat]
  4672. VisibleState: 0
  4673. Exe:
  4674. Adobe Acrobat, acrobat.exe
  4675. DefaultState: 1
  4676. RuleName: Update Adobe Acrobat
  4677. Protocol: TCP
  4678. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4679. Direction: Outbound
  4680. AllowIt
  4681.  
  4682. [Adobe Acrobat Reader]
  4683. VisibleState: 0
  4684. Exe:
  4685. Adobe Acrobat Reader, acrord32.exe
  4686. DefaultState: 1
  4687. RuleName: Update Adobe Acrobat Reader
  4688. Protocol: TCP
  4689. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4690. Direction: Outbound
  4691. AllowIt
  4692.  
  4693. [EditPad Pro]
  4694. VisibleState: 0
  4695. Exe:
  4696. EditPad Pro, editpadpro.exe
  4697. DefaultState: 1
  4698. RuleName: Send mail by EditPad Pro
  4699. Protocol: TCP
  4700. RemotePort: 25
  4701. Direction: Outbound
  4702. AllowIt
  4703.  
  4704. DefaultState: 1
  4705. RuleName: Download/Update EPP Syntax Colour Schemes
  4706. Protocol: TCP
  4707. RemotePort: 80
  4708. RemoteHost: 216.92.230.239
  4709. Direction: Outbound
  4710. AllowIt
  4711.  
  4712. [Babylon]
  4713. VisibleState: 0
  4714. Exe:
  4715. Babylon, babylon.exe
  4716. DefaultState: 1
  4717. RuleName: Babylon HTTP connection
  4718. Protocol: TCP
  4719. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4720. Direction: Outbound
  4721. AllowIt
  4722.  
  4723. ; Encryption
  4724.  
  4725. [ECM SignCode]
  4726. VisibleState: 0
  4727. Exe:
  4728. ECM SignCode, signcode.exe
  4729. DefaultState: 1
  4730. RuleName: ECM SignCode HTTP connection
  4731. Protocol: TCP
  4732. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4733. Direction: Outbound
  4734. AllowIt
  4735.  
  4736. [PGP Keys]
  4737. VisibleState: 0
  4738. Exe:
  4739. PGP Keys, pgpkeys.exe
  4740. DefaultState: 1
  4741. RuleName: PGP Keys HTTP connection
  4742. Protocol: TCP
  4743. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4744. Direction: Outbound
  4745. AllowIt
  4746.  
  4747. DefaultState: 1
  4748. RuleName: PGP Keys Server connection
  4749. Protocol: TCP
  4750. RemotePort: 11370-11371
  4751. Direction: Outbound
  4752. AllowIt
  4753.  
  4754. DefaultState: 1
  4755. RuleName: PGP Keys LDAP connection
  4756. Protocol: TCP
  4757. RemotePort: 3268, 389
  4758. Direction: Outbound
  4759. AllowIt
  4760.  
  4761. ; E-Commerce
  4762.  
  4763. [Cyphermint PayCash]
  4764. VisibleState: 0
  4765. Exe:
  4766. Cyphermint PayCash, wallet.exe
  4767. Cyphermint PayCash, cyphermintwallet.exe
  4768. DefaultState: 1
  4769. RuleName: Cyphermint PayCash connection
  4770. Protocol: TCP
  4771. RemotePort: 8128
  4772. Direction: Outbound
  4773. AllowIt
  4774.  
  4775. DefaultState: 1
  4776. RuleName: Cyphermint PayCash PROXY connection
  4777. Protocol: TCP
  4778. RemotePort: 3128, 8080
  4779. Direction: Outbound
  4780. AllowIt
  4781.  
  4782. DefaultState: 1
  4783. RuleName: Cyphermint PayCash incoming connection
  4784. Protocol: TCP
  4785. LocalPort: 8128
  4786. Direction: Inbound
  4787. AllowIt
  4788.  
  4789. [WebMoney]
  4790. VisibleState: 0
  4791. Exe:
  4792. WebMoney, webmoney.exe
  4793. DefaultState: 1
  4794. RuleName: WebMoney connection
  4795. Protocol: TCP
  4796. RemotePort: 2802
  4797. Direction: Outbound
  4798. AllowIt
  4799.  
  4800. DefaultState: 1
  4801. RuleName: WebMoney HTTP connection
  4802. Protocol: TCP
  4803. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4804. Direction: Outbound
  4805. AllowIt
  4806.  
  4807. ; ARC
  4808.  
  4809. [PowerArchiver]
  4810. VisibleState: 0
  4811. Exe:
  4812. PowerArchiver, powerarc.exe
  4813. DefaultState: 1
  4814. RuleName: Update PowerArchiver
  4815. Protocol: TCP
  4816. RemoteHost: 140.99.102.66
  4817. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4818. Direction: Outbound
  4819. AllowIt
  4820.  
  4821. ; Server
  4822.  
  4823. [Pointcast SMTP Server]
  4824. VisibleState: 0
  4825. Exe:
  4826. Pointcast SMTP Server, pointcastserver.exe
  4827. DefaultState: 1
  4828. RuleName: Send mail by PointCast Server
  4829. Protocol: TCP
  4830. RemotePort: 25
  4831. Direction: Outbound
  4832. AllowIt
  4833.  
  4834. DefaultState: 1
  4835. RuleName: PointCast Server HTTP connection
  4836. Protocol: TCP
  4837. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4838. Direction: Outbound
  4839. AllowIt
  4840.  
  4841. [FTP Server]
  4842. VisibleState: 0
  4843. Exe:
  4844. FTP Server, ftpserve.exe
  4845. DefaultState: 1
  4846. RuleName: FTP Server incoming FTP connection 
  4847. Protocol: TCP
  4848. LocalPort: 21
  4849. Direction: Inbound
  4850. ActivateSI AlgFtp 
  4851. AllowIt
  4852.  
  4853. [Serv-U FTP Server]
  4854. VisibleState: 0
  4855. Exe:
  4856. Serv-U FTP Server, servudaemon.exe
  4857. DefaultState: 1
  4858. RuleName: Serv-U FTP Server connection 
  4859. Protocol: TCP
  4860. LocalPort: 21
  4861. Direction: Inbound
  4862. ActivateSI AlgFtp 
  4863. AllowIt
  4864.  
  4865. [Cerberus FTP Server]
  4866. VisibleState: 0
  4867. Exe:
  4868. Serv-U FTP Server, cerberus.exe
  4869. DefaultState: 1
  4870. RuleName: Cerberus FTP Server connection 
  4871. Protocol: TCP
  4872. LocalPort: 21
  4873. Direction: Inbound
  4874. ActivateSI AlgFtp 
  4875. AllowIt
  4876.  
  4877. ; Games
  4878.  
  4879. [Catch the Sperm!]
  4880. VisibleState: 0
  4881. Exe:
  4882. Catch the Sperm!, catchthesperm.exe
  4883. DefaultState: 1
  4884. RuleName: Catch the Sperm! HTTP connection
  4885. Protocol: TCP
  4886. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4887. Direction: Outbound
  4888. AllowIt
  4889.  
  4890. [Catch the Sperm II]
  4891. VisibleState: 0
  4892. Exe:
  4893. Catch the Sperm II, catchthesperm2.exe
  4894. DefaultState: 1
  4895. RuleName: Catch the Sperm! HTTP connection
  4896. Protocol: TCP
  4897. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  4898. Direction: Outbound
  4899. AllowIt
  4900.  
  4901. [Medal of Honour: Allied Assault]
  4902. VisibleState: 0
  4903. Exe:
  4904. Medal of Honour: Allied Assault, mohaa.exe
  4905. DefaultState: 1
  4906. RuleName: Medal of Honour outbound UDP connection
  4907. Protocol: UDP
  4908. RemotePort: 12203, 12206
  4909. AllowIt
  4910.  
  4911. DefaultState: 1
  4912. RuleName: Medal of Honour inbound UDP connection
  4913. Protocol: UDP
  4914. RemotePort: 12203, 12206
  4915. AllowIt
  4916.  
  4917. DefaultState: 1
  4918. RuleName: Medal of Honour - send 'heartbeat' to master server
  4919. Protocol: UDP
  4920. RemotePort: 27900
  4921. RemoteHost: 216.177.89.34
  4922. AllowIt
  4923.  
  4924. [Championship Manager]
  4925. VisibleState: 0
  4926. Exe:
  4927. Championship Manager, cm0001.exe
  4928. DefaultState: 1
  4929. RuleName: Championship Manager TCP Connection
  4930. Protocol: TCP
  4931. RemotePort: 6667
  4932. Direction: Outbound
  4933. AllowIt
  4934.  
  4935. DefaultState: 1
  4936. RuleName: Championship Manager UDP Connection
  4937. Protocol: UDP
  4938. RemotePort: 6667
  4939. AllowIt
  4940.  
  4941. [Ultima Online]
  4942. VisibleState: 0
  4943. Exe:
  4944. Ultima Online, uo.exe
  4945. RuleName: Ultima Online
  4946. Protocol: TCP
  4947. RemotePort: 7785, 9999, 5001-5010, 7775-7777, 8800-8900
  4948. Direction: Outbound
  4949. AllowIt
  4950.  
  4951. [Quake II]
  4952. VisibleState: 0
  4953. Exe:
  4954. Quake II, quake2.exe
  4955. DefaultState: 1
  4956. RuleName: Quake II TCP Connection
  4957. Protocol: TCP
  4958. RemotePort: 27901
  4959. Direction: Outbound
  4960. AllowIt
  4961.  
  4962. DefaultState: 1
  4963. RuleName: Quake II UDP Connection
  4964. Protocol: UDP
  4965. RemotePort: 27910-27961
  4966. AllowIt
  4967.  
  4968. [Quake III]
  4969. VisibleState: 0
  4970. Exe:
  4971. Quake III, quake3.exe
  4972. DefaultState: 1
  4973. RuleName: Quake III TCP Connection
  4974. Protocol: TCP
  4975. RemotePort: 27950-30000
  4976. Direction: Outbound
  4977. AllowIt
  4978.  
  4979. DefaultState: 1
  4980. RuleName: Quake III UDP Connection
  4981. Protocol: UDP
  4982. RemotePort: 1025, 27910-30000
  4983. AllowIt
  4984.  
  4985. [Unreal]
  4986. VisibleState: 0
  4987. Exe:
  4988. Unreal, unreal.exe
  4989. DefaultState: 1
  4990. RuleName: Unreal TCP Connection
  4991. Protocol: TCP
  4992. RemotePort: 7777, 8888, 27900
  4993. Direction: Outbound
  4994. AllowIt
  4995.  
  4996. DefaultState: 1
  4997. RuleName: Unreal UDP Connection
  4998. Protocol: UDP
  4999. RemotePort: 7777-7781
  5000. AllowIt
  5001.  
  5002. [Delta Force]
  5003. VisibleState: 0
  5004. Exe:
  5005. Delta Force, df.exe
  5006. DefaultState: 1
  5007. RuleName: Delta Force TCP Connection
  5008. Protocol: TCP
  5009. RemotePort: 3100-3999
  5010. Direction: Outbound
  5011. AllowIt
  5012.  
  5013. DefaultState: 1
  5014. RuleName: Delta Force UDP Connection
  5015. Protocol: UDP
  5016. RemotePort: 3100-3999, 3568-3569
  5017. AllowIt
  5018.  
  5019. [Half-Life]
  5020. VisibleState: 0
  5021. Exe:
  5022. Half-Life, hl.exe
  5023. DefaultState: 1
  5024. RuleName: Half-Life TCP Connection
  5025. Protocol: TCP
  5026. RemotePort: 6000-6003, 7001
  5027. Direction: Outbound
  5028. AllowIt
  5029.  
  5030. DefaultState: 1
  5031. RuleName: Half-Life UDP Connection
  5032. Protocol: UDP
  5033. RemotePort: 27000-28000
  5034. AllowIt
  5035.  
  5036. DefaultState: 1
  5037. RuleName: Half-Life Server UDP Connection
  5038. Protocol: UDP
  5039. LocalPort: 27015
  5040. AllowIt
  5041.  
  5042. [Game Zone]
  5043. VisibleState: 0
  5044. Exe:
  5045. Game Zone Client, zclientm.exe
  5046. DefaultState: 0
  5047. RuleName:  MSN(tm) Zone TCP Connection
  5048. Protocol: TCP
  5049. RemotePort: 6667, 8000-9000, 9110, 9113, 8995-11000, 28800-29000
  5050. Direction: Outbound
  5051. AllowIt
  5052.  
  5053. DefaultState: 1
  5054. RuleName: MSN(tm) Zone UDP Connection
  5055. Protocol: UDP
  5056. RemotePort: 0, 8000-9000, 9000-9100, 28800-29000
  5057. AllowIt
  5058.  
  5059. DefaultState: 1
  5060. RuleName:  DirectX and Direct Play Games TCP Connection
  5061. Protocol: TCP
  5062. RemotePort: 2300-2400, 47264
  5063. Direction: Outbound
  5064. AllowIt
  5065.  
  5066. DefaultState: 1
  5067. RuleName: DirectX and Direct Play Games UDP Connection
  5068. Protocol: UDP
  5069. RemotePort: 2300-2400
  5070. AllowIt
  5071.  
  5072. DefaultState: 1
  5073. RuleName: MSN(tm) Zone HTTP connection
  5074. Protocol: TCP
  5075. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  5076. Direction: Outbound
  5077. AllowIt
  5078.  
  5079. [Ricochet]
  5080. VisibleState: 0
  5081. Exe:
  5082. Ricochet, ricochet.exe
  5083. DefaultState: 1
  5084. RuleName: Ricochet HTTP connection
  5085. Protocol: TCP
  5086. RemotePort:  80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  5087. Direction: Outbound
  5088. AllowIt
  5089.  
  5090. ; Administration
  5091.  
  5092. [Citrix ICA]
  5093. VisibleState: 0
  5094. Exe:
  5095. Citrix ICA Shell, pn.exe
  5096. Citrix ICA Client, wfica32.exe
  5097. DefaultState: 1
  5098. RuleName: ICA server search
  5099. Protocol: UDP
  5100. RemotePort: 1604
  5101. AllowIt
  5102.  
  5103. DefaultState: 1
  5104. RuleName: ICA data connection
  5105. Protocol: TCP
  5106. RemotePort: 1494
  5107. Direction: Outbound
  5108. AllowIt
  5109.  
  5110. [NetAdmin (MySQL)]
  5111. VisibleState: 0
  5112. Exe:
  5113. NetAdmin, netadmin.exe
  5114. DefaultState: 1
  5115. RuleName: NetAdmin MySQL data connection
  5116. Protocol: TCP
  5117. Direction: Outbound
  5118. RemotePort: 3306
  5119. AllowIt
  5120.  
  5121. [PCAnywhere Remote Control]
  5122. VisibleState: 0
  5123. Exe:
  5124. PCAnywhere Remote Control, awrem32.exe
  5125. DefaultState: 1
  5126. RuleName: PCAnywhere UDP connection (OUT)
  5127. Protocol: UDP
  5128. RemotePort: 5632
  5129. AllowIt
  5130.  
  5131. DefaultState: 1
  5132. RuleName: PCAnywhere TCP connection (OUT)
  5133. Protocol: TCP
  5134. Direction: Outbound
  5135. RemotePort: 5631
  5136. AllowIt
  5137.  
  5138. [PCAnywhere Host]
  5139. VisibleState: 0
  5140. Exe:
  5141. PCAnywhere Host, awhost32.exe
  5142. DefaultState: 1
  5143. RuleName: PCAnywhere UDP connection (IN)
  5144. Protocol: UDP
  5145. LocalPort: 5632
  5146. AllowIt
  5147.  
  5148. DefaultState: 1
  5149. RuleName: PCAnywhere TCP connection (IN)
  5150. Protocol: TCP
  5151. Direction: Inbound
  5152. LocalPort: 5631
  5153. AllowIt
  5154.  
  5155. [Remote Administrator Client]
  5156. VisibleState: 0
  5157. Exe:
  5158. Remote Administrator Client, radmin.exe
  5159. DefaultState: 1
  5160. RuleName: Remote Administrator Client connection
  5161. Protocol: TCP
  5162. Direction: Outbound
  5163. RemotePort: 4899
  5164. AllowIt
  5165.  
  5166. [Remote Administrator Host]
  5167. VisibleState: 0
  5168. Exe:
  5169. Remote Administrator Host, r_service.exe
  5170. DefaultState: 1
  5171. RuleName: Remote Administrator Host connection
  5172. Protocol: TCP
  5173. Direction: Inbound
  5174. LocalPort: 4899
  5175. AllowIt
  5176.  
  5177.  
  5178. ; Other
  5179.  
  5180. [United Devices]
  5181. VisibleState: 0
  5182. Exe:
  5183. United Devices, ud.exe
  5184. DefaultState: 1
  5185. RuleName: United Devices HTTP connection
  5186. Protocol: TCP
  5187. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  5188. Direction: Outbound
  5189. AllowIt
  5190.  
  5191. [MTS Balance]
  5192. VisibleState: 0
  5193. Exe:
  5194. MTS Balance, mtsbalance.exe
  5195. DefaultState: 1
  5196. RuleName: MTS Balance HTTPS connection
  5197. Protocol: TCP
  5198. Direction: Outbound
  5199. RemotePort: 443
  5200. AllowIt
  5201.  
  5202. [Semagic LiveJournal Client]
  5203. VisibleState: 0
  5204. Exe:
  5205. Semagic LiveJournal Client, livejournalu.exe
  5206. DefaultState: 1
  5207. RuleName: Semagic LiveJournal Client connection
  5208. Protocol: TCP
  5209. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  5210. Direction: Outbound
  5211. AllowIt
  5212.  
  5213. ; Anti-Spam
  5214.  
  5215. [Bounce Spam Mail]
  5216. VisibleState: 0
  5217. Exe:
  5218. Bounce Spam Mail, bsm18.exe
  5219. DefaultState: 1
  5220. RuleName: Send mail by Bounce Spam Mail
  5221. Protocol: TCP
  5222. RemotePort: 25
  5223. Direction: Outbound
  5224. AllowIt
  5225.  
  5226. [SpamPal]
  5227. VisibleState: 0
  5228. Exe:
  5229. SpamPal, spampal.exe
  5230. DefaultState: 1
  5231. RuleName: SpamPal HTTP Connection
  5232. Protocol: TCP
  5233. RemotePort: 80-83, 443, 1080, 3128, 8080, 8081, 8088, 11523
  5234. Direction: Outbound
  5235. AllowIt
  5236.  
  5237. DefaultState: 1
  5238. RuleName: Receive Mail by SpamPal
  5239. Protocol: TCP
  5240. RemotePort: 110
  5241. Direction: Outbound
  5242. AllowIt
  5243.  
  5244. ;NTDomain
  5245.  
  5246. [LSASS.EXE]
  5247. VisibleState: 0
  5248. Group: NTDomain
  5249. Exe:
  5250. Local Security Authority Service, lsass.exe
  5251.  
  5252. DefaultState: 1
  5253. RuleName: Local Security Authority Service Kerberos UDP connection
  5254. Protocol: UDP
  5255. RemotePort: 88
  5256. ActivateSI
  5257. AllowIt
  5258.  
  5259. DefaultState: 1
  5260. RuleName: Local Security Authority Service Kerberos TCP connection
  5261. Protocol: TCP
  5262. RemotePort: 88
  5263. Direction: Outbound
  5264. AllowIt
  5265.  
  5266. DefaultState: 1
  5267. RuleName: LSASS LDAP connection to Global Catalog Server
  5268. Protocol: TCP
  5269. RemotePort: 3268, 3269
  5270. Direction: Outbound
  5271. ActivateSI
  5272. AllowIt
  5273.  
  5274. DefaultState: 1
  5275. RuleName: Local Security Authority Service LDAP connection
  5276. Protocol: UDP
  5277. RemotePort: 389
  5278. ActivateSI
  5279. AllowIt
  5280.  
  5281. DefaultState: 1
  5282. RuleName: Local Security Authority Service LDAP connection
  5283. Protocol: TCP
  5284. RemotePort: 389
  5285. Direction: Outbound
  5286. ActivateSI
  5287. AllowIt
  5288.  
  5289. DefaultState: 1
  5290. RuleName: Local Security Authority Service DCOM dynamic port allocation
  5291. Protocol: TCP
  5292. RemotePort: 1025-1040
  5293. Direction: Outbound
  5294. AllowIt
  5295.  
  5296. DefaultState: 1
  5297. RuleName: Local Security Authority Service DCOM connection
  5298. Protocol: TCP
  5299. RemotePort: 135
  5300. Direction: Outbound
  5301. AllowIt
  5302.  
  5303. [SERVICES.EXE]
  5304. VisibleState:0
  5305. Group: NTDomain
  5306. Exe:
  5307. Services and controller app, services.exe
  5308.  
  5309. DefaultState: 1
  5310. RuleName: Services DCOM connection
  5311. Protocol: TCP
  5312. RemotePort: 135
  5313. Direction: Outbound
  5314. AllowIt
  5315.  
  5316. DefaultState: 1
  5317. RuleName: Services DCOM dynamic port allocation
  5318. Protocol: TCP
  5319. RemotePort: 1090-1110
  5320. Direction: Outbound
  5321. AllowIt
  5322.  
  5323. DefaultState: 1
  5324. RuleName: Services LDAP connection
  5325. Protocol: TCP
  5326. RemotePort: 3268, 389
  5327. Direction: Outbound
  5328. AllowIt
  5329.  
  5330. [WINLOGON.EXE]
  5331. VisibleState: 0
  5332. Group: NTDomain
  5333. Exe:
  5334. Microsoft Windows logon application, winlogon.exe
  5335.  
  5336. DefaultState: 1
  5337. RuleName: Microsoft Winlogon LDAP connection
  5338. Protocol: TCP
  5339. RemotePort: 3268, 389
  5340. Direction: Outbound
  5341. AllowIt
  5342.  
  5343. DefaultState: 1
  5344. RuleName: Microsoft Winlogon DCOM connection
  5345. Protocol: TCP
  5346. RemotePort: 135
  5347. Direction: Outbound
  5348. AllowIt
  5349.  
  5350. [USERINIT.EXE]
  5351. VisibleState: 0
  5352. Group: NTDomain
  5353. Exe:
  5354. Microsoft Userinit Logon Application, userinit.exe
  5355.  
  5356. DefaultState: 1
  5357. RuleName: Microsoft Userinit LDAP connection
  5358. Protocol: TCP
  5359. RemotePort: 3268, 389
  5360. Direction: Outbound
  5361. AllowIt
  5362.  
  5363. DefaultState: 1
  5364. RuleName: Microsoft Userinit DCOM connection
  5365. Protocol: TCP
  5366. RemotePort: 135
  5367. Direction: Outbound
  5368. AllowIt
  5369.  
  5370. [LocalHost UDP]
  5371. VisibleState: 0
  5372. Group: Auto
  5373. Exe:
  5374. system, system
  5375.  
  5376. DefaultState: 1
  5377. RuleName: Allow LocalHost UDP Connection
  5378. Protocol: UDP
  5379. LocalHost: 255.255.255.255:0.0.0.0
  5380. RemoteHost: 255.255.255.255:0.0.0.0
  5381. EqualPorts
  5382. AllowIt
  5383. IgnoreCC
  5384.  
  5385. ; VPN
  5386.  
  5387.  
  5388. [Cisco VPN Client]
  5389. VisibleState: 0
  5390. Exe:
  5391. Cisco VPN Client, vpngui.exe
  5392. Cisco VPN Client, cvpnd.exe
  5393.  
  5394. DefaultState: 1
  5395. RuleName: Cisco VPN Client connection
  5396. Protocol: TCP
  5397. RemoteHost: 255.255.255.255:0.0.0.0
  5398. RemotePort: 62514, 62516
  5399. Direction: Outbound
  5400. AllowIt
  5401. IgnoreCC
  5402.  
  5403. DefaultState: 1
  5404. RuleName: Cisco VPN Client connection
  5405. Protocol: UDP
  5406. LocalPort: 500
  5407. RemotePort: 500
  5408. AllowIt
  5409. IgnoreCC
  5410.  
  5411. [Kerio VPN Client]
  5412. VisibleState: 0
  5413. Exe:
  5414. Kerio VPN Client, kvpnclient.exe
  5415. system, system
  5416.  
  5417. DefaultState: 1
  5418. RuleName: Kerio VPN Client UDP connection
  5419. Protocol: UDP
  5420. LocalPort: 4090
  5421. RemotePort: 4090
  5422. AllowIt
  5423.  
  5424. DefaultState: 1
  5425. RuleName: Kerio VPN Client TCP connection
  5426. Protocol: TCP
  5427. LocalPort: 4090
  5428. RemotePort: 4090
  5429. Direction: Outbound
  5430. AllowIt
  5431.  
  5432.  
  5433. ; system Rules
  5434.  
  5435. [Allow DNS Resolving (TCP)]
  5436. VisibleState: 0
  5437. Exe:
  5438. system, system
  5439. DefaultState: 1
  5440. RuleName: Allow DNS Resolving (TCP)
  5441. Protocol: TCP
  5442. RemotePort: 53
  5443. Direction: Outbound
  5444. AllowIt
  5445.  
  5446. [Allow DNS Resolving (UDP)]
  5447. VisibleState: 0
  5448. Exe:
  5449. system, system
  5450. DefaultState: 1
  5451. RuleName: Allow DNS Resolving (UDP)
  5452. Protocol: UDP
  5453. RemotePort: 53
  5454. ActivateSI AlgFtp
  5455. AllowIt
  5456.  
  5457.  
  5458. [Allow Outgoing DHCP]
  5459. VisibleState: 0
  5460. Exe:
  5461. system, system
  5462. DefaultState: 1
  5463. RuleName: Allow Outgoing DHCP
  5464. Protocol: UDP
  5465. RemotePort: 67, 68, 546, 547
  5466. AllowIt
  5467.  
  5468. [Allow Inbound Identification]
  5469. VisibleState: 0
  5470. Exe:
  5471. system, system
  5472. DefaultState: 0
  5473. RuleName: Allow Inbound Identification
  5474. Protocol: TCP
  5475. LocalPort: 113
  5476. Direction: Inbound
  5477. AllowIt
  5478.  
  5479. [Allow Loopback]
  5480. VisibleState: 0
  5481. Exe:
  5482. system, system
  5483. DefaultState: 1
  5484. RuleName: Allow Loopback
  5485. Protocol: TCP
  5486. RemoteHost: 127.0.0.1
  5487. Direction: Inbound
  5488. AllowIt
  5489.  
  5490. [Allow PPTP control connection]
  5491. VisibleState: 0
  5492. Exe:
  5493. system, system
  5494. DefaultState: 1
  5495. RuleName: Allow PPTP control connection
  5496. Protocol: TCP
  5497. LocalPort: 1024-65535
  5498. RemotePort: 1723
  5499. Direction: Outbound
  5500. AllowIt
  5501.  
  5502. [Block Remote Procedure Call (TCP)]
  5503. VisibleState: 0
  5504. Exe:
  5505. system, system
  5506. DefaultState: 1
  5507. RuleName: Block Remote Procedure Call (TCP)
  5508. Protocol: TCP
  5509. LocalPort: 135
  5510. Direction: Inbound
  5511. BlockIt
  5512.  
  5513. [Block Remote Procedure Call (UDP)]
  5514. VisibleState: 0
  5515. Exe:
  5516. system, system
  5517. DefaultState: 1
  5518. RuleName: Block Remote Procedure Call (UDP)
  5519. Protocol: UDP
  5520. LocalPort: 135
  5521. BlockIt
  5522.  
  5523. [Block Server Message Block Protocol (TCP)]
  5524. VisibleState: 0
  5525. Exe:
  5526. system, system
  5527. DefaultState: 1
  5528. RuleName: Block Server Message Block Protocol (TCP)
  5529. Protocol: TCP
  5530. LocalPort: 445
  5531. Direction: Inbound
  5532. BlockIt
  5533.  
  5534. [Block Remote Procedure Call (UDP)]
  5535. VisibleState: 0
  5536. Exe:
  5537. system, system
  5538. DefaultState: 1
  5539. RuleName: Block Remote Procedure Call (UDP)
  5540. Protocol: UDP
  5541. LocalPort: 445
  5542. BlockIt
  5543.  
  5544. [Allow GRE Protocol]
  5545. VisibleState: 0
  5546. Exe:
  5547. system, system
  5548. DefaultState: 1
  5549. RuleName: Allow GRE Protocol
  5550. Protocol: IP
  5551. IPType: GRE
  5552. AllowIt
  5553.  
  5554. [Block IGMP Multicast]
  5555. VisibleState: 0
  5556. Exe:
  5557. system, system
  5558. DefaultState: 1
  5559. RuleName: Block IGMP Multicast
  5560. Protocol: IP
  5561. IPType: IGMP
  5562. RemoteHost: 224.0.0.*
  5563. BlockIt
  5564.