vistafirewallcontrol.freeforums.org

[oelchen234]

Hi guys, this so annoying. I already had so much trouble with this flash updater thing. Now and then it pops up and I see absolutely no way to create an entry to allow access. Update fails of course. I already have some entrys for flash updater and I cannot say how they appeared. I tried to add the application from WOW... something /flash or so. But WFC says cannot create system entrys. And this damn thing is named with its version number! Who was so funny to do that?? So the older entrys do not apply any more. I am really p... Whats the point in this? Adobe is sabotaging its own security policy? WFC programmers funny?

Can anyone help?

[VistaFirewallControl]

Switching the firewall temporary off with TrayIcon/RightClick/Mode:EnableAll should help
Or download and install the update separately/manually

The explanations (if you do need them)
“Mutable (Web) Installer Helpers” at http://sphinx-soft.com/Vista/faq.html
Probably “Multiple app(1), app(2) etc entries in Programs list.” as well

[oelchen234]

Thank you, although this is very unsatisfactoy.

[VistaFirewallControl]

If an updater generates temporarily executables in volume, the firewall must protect all of them, regardless of the updater “aggressive” specifics, so the firewall just protects.
If the protection in full is not required (the more important criteria arise), the firewall should be switched off.

[PietO]

If an updater generates temporarily executables in volume, the firewall must protect all of them, regardless of the updater “aggressive” specifics, so the firewall just protects.
If the protection in full is not required (the more important criteria arise), the firewall should be switched off.

Oke, but preferably ONLY for outgoing originating traffic (leaving incoming traffic disabled). Is this foreseen (can''t find this in the modes)?

[VistaFirewallControl]

W7FC blocks any (outgoing and/or incoming) access attempt of non listed network requester.
So if you don’t enable incoming traffic explicitly (in response to the application detection prompt, manual permissions settings, by settings an incorrect Default or AllApplication zone) the incoming traffic will be disables definitely.

[oelchen234]

I think what was meant is: if you are requred to disable firewall to allow mutable installers, disabling the blocking of outgoing traffic ONLY would be preferable. leaving the blocking of incoming traffic intact so that you are not perfectly naked.

[VistaFirewallControl]

Disabling the entire firewall to allow mutable installers is too strong “remedy”.
Installing the updates manually solves the problem typically without a need to switch the firewall off.
Tweaking AllApplications zone can help solving the problem safely as well.
All the multiple installers tries to connect to the same IP address typically, So (temporarily or permanently) enabling the IP in AllApplication zone overrides the initial (unlisted applications) blocking of the IP.
If the IP determination is not possible for a reason AllApplications zone can be temporarily added with enabling all outgoings (optionally with disabling all incomings), so the update process would go smoothly.

[PietO]

according to the quote in my previous post, i understood that you suggusted the completely switch of the firwall. I agree fully with you that this is a too strong remedy.

Allowing a specific IP seems to be the best solution which i will adapt the next time i encounter this problem next time.

[oelchen234]

I suppose this option is not available in the free version of WFC?