vistafirewallcontrol.freeforums.org

[Edmiri]

I need a zone that allow games to be played in LAN (multi player) but to block them for accessing the internet. Which zone should i select? I tried lanonly but didnt worked. I use firewall pro, windows 7 SP1 64 bit. Thanks.

[VistaFirewallControl]

If LanOnly doesn’t work, the game requires an access beyond the LAN as well.
W7FC specifies the access attempts blocked precisely.
Please draw attention to the game related blocked notifications (or blocked.log from the installation folder) and customize (a copy of) LanOnly accordingly.
If you need assistance, please specify the game related blocked events.

[Edmiri]

The game is Sniper Ghost Warrior. I think you should produce a zone for accessing everything except internet. I tried all the zones and the most likely one for this purpose is Local+DNS+DHCP(svchost). This was hte only zone that block the internet and allow me to find the game created by another pc on lan.

[VistaFirewallControl]

Local+DNS+DHCP(svchost) zone allows various internet access as well.
DNS and broadcast/multicast for instance.
So the zone is much more permissive than LanOnly.
There is no problem to add a GameLanOnly zone, we are not sure the zone should be as permissive as svchost related however.
What activities are required beyond LanOnly?

[HughGardner]

Hi, Steam just got compromized and I want to tighten up the VFC controls for it. I found that (perhaps incorrectly) to get full functionality out of steam, I had to "enable all". This now does not seem to be a very good idea.

Has anybody done some work in this area and found the best settings for steam? Thanks. Hugh

[VistaFirewallControl]

Juts to clarify our position
- There is no problem to add one or more game dedicated zone to the predefined zone list, we just have to realize the zones purpose/content precisely.
- We will hardly perform some game related investigations ourselves, so would rely on the user suggestions mostly. The way to investigate is simple however – set LanOnly initially, check the blocked notifications, adjust the zone correspondingly, etc till the games are network compliant completely. For now, it’s clear more or less that the GameZone (say so) should include LANOnly + some rules for Broadcast/multicast activity (to enable the game peers to find each other) + (maybe) some DNS activity (who knows for what in the LAN environment).
- The zone “beta” will be included in the next beta version.
- Unfortunately, the investigations can be finished with “enableall” is actually required.
Randomly generated port numbers for the game peer communications may require that. Anyway we should try to make our best.

[Edmiri]

I have tried many games with Local+DNS+DHCP(svchost) and they dont update and they dont connect with servers online but they can be played on lan, like Fifa 2011, sniper ghost warrior, etc etc.

[VistaFirewallControl]

That means our expectations were correct
Thank you