How does Firewall blocking work?

Please define ‘specifically allowed’ include by whom and exactly what control does the paying user have over this flag.

I have not forgotten the behaviour of Webroot when it encounters game trainers which the user has allowed.  It blocks them anyway after 2--30 minutes use.

It seems very obvious that Webroot cannot be trusted to do what the user requires. Are they paid Chicago style backhanders by MS and game companies to over-rule paying customers decisions? It looks very much like it from where I’m sitting under “The hand of the God Webroot’.

Send my regards to Al.

Well I tested the Firewall settings and it works as it should even after rebooting?

For example:

My last post thanking you vanished. I reinstalled exactly as instructed. The result is that the list of allowed programs is very much shorter containing no residue from the previous installations and after changing the allows to blocks they stay that way unlike before.

However, everything carries on working as if nothing is blocked which defeats the object of checking out what my browsers are up to, none of which show in the process list. I am now certain there is a hidden whitelist.

Also puzzled by double clicking a process which brings up Custom Rules but no way of adding one. Nor have I seen even 1 of the promised warnings when a process connects to the internet.

In your earlier example you show WR working as it should but it looks to me as if you have Officeclicktorun.exe Blocked  but the lower window shows functions allowed.

My understanding of Block is probably at fault. I took it to mean if Officectr was blocked then a warning would be issued whether to allow access or not and if no was chosen then it’s 4 active connections would be blocked?

Passed it on to support as advised but previous experience gives me little confidence. They are experts in obfuscation. I am actually interested in how you managed to get Firefox to show up on the process list. I’ve never got a browser to show up there. Back in the days of Dr Solomans anti-virus toolkit they did an honest job with no outside interference and the Doc  was always available on Cix to discuss any problems. I dumped Bitdefender  for the same reasons I am about to dump Webroot. Too many invisible fingers in other peoples pies.

Got this from support :-

“The Webroot SecureAnywhere program does utilize a whitelist that is continuously updated behind the scenes and is not accessible to customers. When we refer to processes on your system, we are typically looking at processes that are not already whitelisted and could potentially be malicious by opening outbound internet connections outside of your browser. Please note that our Firewall is only protecting outbound connections. Microsoft's Windows Firewall will protect against inbound connections to your machine. You can block/allow specific programs by clicking the gear icon to the right of PC Security then clicking on Block/Allow Files. If you choose to block a program and run it, then our software will display a block message and the program will not load. This will also kick off a new scan and the user interface will turn red. If you then decide to allow the program a new scan will turn the user interface green again.”

Not only does this raise the question as to why whitelisted browsers etc can appear on the Process list and allow you, in your ignorance, to block them to no effect. It also raises the question of how you get your program on the Whitelist, how much it costs  and is it then thoroughly tested by Webroot?

Have to say I didn’t expect to pay for an AV program that had already been hacked as most of the others have been too. Anybody know an honest AV program they could recommend. Dr Solomons was for quite a while till he sold out.

I got :-

1. There is a hidden whitelist that cannot be over ruled.
2. Presumably there by arrangement with MS, Browser people, game companies and so forth. Another source of income? Bitdefender does this too as I suppose do all of them except oddly Windows firewall.
3. The bug is that the process list in active connections shows whitelisted programs which can be ‘blocked’ there but remain unblocked. They are referring this to ‘higher authority’.
4. I am returning to windows Firewall. seems impossible to turn off the Webroot one or is it?