NSIS Simple Firewall Plugin - Revision history

Speed78: /* Changelog */

2021-05-04T21:30:23Z

Changelog

â† Older revision		Revision as of 21:30, 4 May 2021
Line 342:		Line 342:

	== Changelog ==		== Changelog ==
	*Version 1.20 (2014-06-12)		*Version 1.21 (Unicode) (2021-05-04)
			**Unicode Version added with the same functions like the ANSI version.
			*Version 1.21 (ANSI) (2021-05-04)
			**SimpleFC::StartStopFirewallService return now correct false if the service cannot be stopped / started. Hint: In Windows 10 the firewall service is part of the Windows Defender and cannot be stopped / started.
			*Version 1.20 (ANSI) (2014-06-12)
	**Added "ServiceName" parameter to function "AdvAddRule"		**Added "ServiceName" parameter to function "AdvAddRule"
	**Documentation updated		**Documentation updated
	*Version 1.19 (2012-07-16)		*Version 1.19 (ANSI) (2012-07-16)
	**Documentation updated		**Documentation updated
	*Version 1.18 (2010-02-23)		*Version 1.18 (ANSI) (2010-02-23)
	**Documentation updated		**Documentation updated
	*Version 1.17 (2009-09-05)		*Version 1.17 (ANSI) (2009-09-05)
	**Added changes from the service manager		**Added changes from the service manager
	**The following functions are now case insensitive:		**The following functions are now case insensitive:
Line 356:		Line 360:
	***SimpleFC::EnableDisableApplication		***SimpleFC::EnableDisableApplication
	***SimpleFC::AdvExistsRule		***SimpleFC::AdvExistsRule
	*Version 1.16 (2009-04-13)		*Version 1.16 (ANSI) (2009-04-13)
	**Added changes from the service manager		**Added changes from the service manager
	*Version 1.15 (2008-08-18)		*Version 1.15 (ANSI) (2008-08-18)
	**Added changes from the service manager and checked removed compiler optimization to avoid a false-positive virusscan.		**Added changes from the service manager and checked removed compiler optimization to avoid a false-positive virusscan.
	*Version 1.14 (2008-02-05)		*Version 1.14 (ANSI) (2008-02-05)
	** Added changes from the service manager		** Added changes from the service manager
	*Version 1.13 (2008-01-29)		*Version 1.13 (ANSI) (2008-01-29)
	** Added changes from the service manager		** Added changes from the service manager
	*Version 1.12 (2007-11-13)		*Version 1.12 (ANSI) (2007-11-13)
	** Fixed wrong documentation about SimpleFC::AdvExistsRule		** Fixed wrong documentation about SimpleFC::AdvExistsRule
	*Version 1.11 (2007-08-07)		*Version 1.11 (ANSI) (2007-08-07)
	** Fixed potential endless loop bug in SimpleFC::StartStopFirewallService		** Fixed potential endless loop bug in SimpleFC::StartStopFirewallService
	*Version 1.10 (2007-08-02)		*Version 1.10 (ANSI) (2007-08-02)
	** Added default firewall functions:		** Added default firewall functions:
	*** SimpleFC::RestoreDefaults		*** SimpleFC::RestoreDefaults
Line 386:		Line 390:
	*** SimpleFC::AdvRemoveRule		*** SimpleFC::AdvRemoveRule
	*** SimpleFC::AdvExistsRule		*** SimpleFC::AdvExistsRule
	*Version 1.01 (2007-07-05)		*Version 1.01 (ANSI) (2007-07-05)
	**Changed missing documentation about the function SimpleFC::IsFirewallEnabled		**Changed missing documentation about the function SimpleFC::IsFirewallEnabled
	*Version 1.0 (2007-05-02)		*Version 1.0 (ANSI) (2007-05-02)
	**First offical version		**First offical version

Speed78: /* Links */

2021-05-04T21:26:47Z

Links

â† Older revision		Revision as of 21:26, 4 May 2021
Line 10:		Line 10:
	*Unicode Version: <attach>NSIS_Simple_Firewall_Plugin_Unicode_1.21.zip</attach> (Recommend for >= NSIS 3.x)		*Unicode Version: <attach>NSIS_Simple_Firewall_Plugin_Unicode_1.21.zip</attach> (Recommend for >= NSIS 3.x)
	*ANSI Version: <attach>NSIS_Simple_Firewall_Plugin_ANSI_1.21.zip</attach>		*ANSI Version: <attach>NSIS_Simple_Firewall_Plugin_ANSI_1.21.zip</attach>

			== Donation ==
			If you believe that I am doing a good job and you want to support me please [http://www.speed-soft.de/donation/index.php?language=en donate] any amount via PayPal.

	== Short Reference ==		== Short Reference ==

Speed78: /* Links */

2021-05-04T21:26:18Z

Links

â† Older revision		Revision as of 21:26, 4 May 2021
Line 6:		Line 6:

	== Links ==		== Links ==
	~~<attach>NSIS_Simple_Firewall_Plugin_1.20.zip</attach>~~ The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.		The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.
			If you update from a previous version it is strongly '''recommend''' to take look at the changelog.
			*Unicode Version: <attach>NSIS_Simple_Firewall_Plugin_Unicode_1.21.zip</attach> (Recommend for >= NSIS 3.x)
			*ANSI Version: <attach>NSIS_Simple_Firewall_Plugin_ANSI_1.21.zip</attach>

	== Short Reference ==		== Short Reference ==

Speed78: /* Changelog */

2014-12-06T12:51:30Z

Changelog

â† Older revision		Revision as of 12:51, 6 December 2014
Line 336:		Line 336:

	== Changelog ==		== Changelog ==
			*Version 1.20 (2014-06-12)
			**Added "ServiceName" parameter to function "AdvAddRule"
			**Documentation updated
	*Version 1.19 (2012-07-16)		*Version 1.19 (2012-07-16)
	**Documentation updated		**Documentation updated

Speed78 at 12:43, 6 December 2014

2014-12-06T12:43:18Z

Anders: Reverted edits by 185.4.252.73 to last version by Speed78

2013-05-15T20:31:08Z

Reverted edits by 185.4.252.73 to last version by Speed78

Show changes

185.4.252.73: UHIdlNTizW

2013-05-15T19:52:38Z

UHIdlNTizW

Show changes

Speed78: /* Changelog */

2012-07-16T19:58:40Z

Changelog

â† Older revision		Revision as of 19:58, 16 July 2012
Line 335:		Line 335:

	== Changelog ==		== Changelog ==
			*Version 1.19 (2012-07-16)
			**Documentation updated
	*Version 1.18 (2010-02-23)		*Version 1.18 (2010-02-23)
	**Documentation updated		**Documentation updated

Speed78: /* Links */

2012-07-16T19:57:50Z

Links

â† Older revision		Revision as of 19:57, 16 July 2012
Line 6:		Line 6:

	== Links ==		== Links ==
	<attach>NSIS_Simple_Firewall_Plugin_1.18.zip</attach> The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.		<attach>NSIS_Simple_Firewall_Plugin_1.19.zip</attach> The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.

	== Donation ==		== Donation ==

Speed78: /* Short Reference */

2012-07-16T19:05:37Z

Short Reference

â† Older revision		Revision as of 19:05, 16 July 2012
Line 72:		Line 72:
	**17 - UDP		**17 - UDP
	**58 - ICMPv6		**58 - ICMPv6
			**256 - Any protocol
	*scope - One of the following scope		*scope - One of the following scope
	**0 - All networks		**0 - All networks
	**1 - Only local subnets		**1 - Only local subnets
	**2 - Custom scope		**2 - Custom scope
	**3 - Max		**3 - Max scope
	**NOTE: If you use custom you must define remote_addresses		**NOTE: If you use custom you must define remote_addresses
	*ip_version		*ip_version
	**0 - IPv4		**0 - IPv4
	**1 - IPv6		**1 - IPv6
	**2 - Any ~~protocol~~		**2 - Any version
	*icmp_type		*icmp_type
	**3 - Outbound Destination Unreachable (ICMPv4)		**3 - Outbound Destination Unreachable (ICMPv4)
Line 109:		Line 110:
	**0 - Block		**0 - Block
	**1 - Allow		**1 - Allow
	*application - ~~Name~~ of the application (can be empty)		*application - Path of the application (can be empty)
	*icmp_types_and_codes - Specified icmp types and codes		*icmp_types_and_codes - Specified icmp types and codes (can be empty)
	*group - Put the rule in this specified group (can be empty)		*group - Put the rule in this specified group (can be empty)
	**'''Note''': On Vista the group must the a resource string in a exe/dll e.g. "@C:\Program Files\My Application\myapp.exe,-10000". On all other supported operating systems it can be a string value.		**'''Note''': On Vista the group must the a resource string in a exe/dll e.g. "@C:\Program Files\My Application\myapp.exe,-10000". On all other supported operating systems it can be a string value.
	*local_ports - Local ports (can be empty)		*local_ports - Local ports (The protocol property must be set before - Otherwise can be empty)
	*remote_ports - Remote ports (can be empty)		*remote_ports - Remote ports (The protocol property must be set before - Otherwise can be empty)
	*local_address - Local ~~ip address~~ (can be empty)		*local_address - Local addresses from which the port can listen for traffic (can be empty)
	*~~remote_addresses~~ - Remote addresses from which the port can listen for traffic		*remote_address - Remote addresses from which the port can listen for traffic (can be empty)
	*status - Status of the port, application, rule, firewall or service for example enabled/disabled, start/stop or allow/disallow		*status - Status of the port, application, rule, firewall or service for example enabled/disabled, start/stop or allow/disallow
	**0 - Disabled, stop or disallow		**0 - Disabled, stop or disallow

â† Older revision		Revision as of 12:43, 6 December 2014
Line 6:		Line 6:

	== Links ==		== Links ==
	<attach>NSIS_Simple_Firewall_Plugin_1.19.zip</attach> The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.		<attach>NSIS_Simple_Firewall_Plugin_1.20.zip</attach> The ZIP file containing a precompiled plugin DLL (to be saved in NSIS' plugin directory) and the sources.

	~~== Donation ==~~
	~~If you believe that I am doing a good job and you want to support me please [http://www.speed-soft.de/donation/index.php?language=en donate] any amount via PayPal~~.

	== Short Reference ==		== Short Reference ==
Line 55:		Line 52:

	SimpleFC::AdvAddRule [name] [description] [protocol] [direction]		SimpleFC::AdvAddRule [name] [description] [protocol] [direction]
	[status] [profile] [action] [application] [icmp_types_and_codes]		[status] [profile] [action] [application] [service_name] [icmp_types_and_codes]
	[group] [local_ports] [remote_ports] [local_address] [remote_address]		[group] [local_ports] [remote_ports] [local_address] [remote_address]
	SimpleFC::AdvRemoveRule [name]		SimpleFC::AdvRemoveRule [name]
Line 111:		Line 108:
	**1 - Allow		**1 - Allow
	*application - Path of the application (can be empty)		*application - Path of the application (can be empty)
			servicename - Specifies the service name property of the application (can be empty).
			*'''Note''': A serviceName value of "" indicates that a service, not an application, must be sending or receiving traffic.
	*icmp_types_and_codes - Specified icmp types and codes (can be empty)		*icmp_types_and_codes - Specified icmp types and codes (can be empty)
	*group - Put the rule in this specified group (can be empty)		*group - Put the rule in this specified group (can be empty)
	**'''Note''': On Vista the group must the a resource string in a exe/dll e.g. "@C:\Program Files\My Application\myapp.exe,-10000". On all other supported operating systems it can be a string value.		**'''Note''': On Vista the group must the a resource string in a exe/dll e.g. "@C:\Program Files\My Application\myapp.exe,-10000". On all other supported operating systems it can be a string value.
	*local_ports - Local ports (The protocol property must be set before - Otherwise can be empty)		*local_ports - Local ports (The protocol property must be set before - Otherwise can be empty)
			**'''Note''': The following port keywords are valid addionally: "RPC", "RPC-EPMap", "Teredo", "IPTLSIn", "IPHTTPSIn" and "Ply2Disc"
	*remote_ports - Remote ports (The protocol property must be set before - Otherwise can be empty)		*remote_ports - Remote ports (The protocol property must be set before - Otherwise can be empty)
			**'''Note''': The following port keywords are valid addionally: "RPC", "RPC-EPMap", "Teredo", "IPTLSIn", "IPHTTPSIn" and "Ply2Disc"
	*local_address - Local addresses from which the port can listen for traffic (can be empty)		*local_address - Local addresses from which the port can listen for traffic (can be empty)
	*remote_address - Remote addresses from which the port can listen for traffic (can be empty)		*remote_address - Remote addresses from which the port can listen for traffic (can be empty)
Line 303:		Line 304:
	SimpleFC::AdvAddRule "Echo-Reply (ICMPv4 incoming)" \		SimpleFC::AdvAddRule "Echo-Reply (ICMPv4 incoming)" \
	"Allows incoming Echo Replies messages." "1" "1" "1" "7" "1" "" \		"Allows incoming Echo Replies messages." "1" "1" "1" "7" "1" "" \
	"0:0" "@PathToApplication,-10000" "" "" "" ""		"" "0:0" "@PathToApplication,-10000" "" "" "" ""
	Pop $0 ; return error(1)/success(0)		Pop $0 ; return error(1)/success(0)

Line 309:		Line 310:
	SimpleFC::AdvAddRule "Echo-Request (ICMPv4 incoming)" \		SimpleFC::AdvAddRule "Echo-Request (ICMPv4 incoming)" \
	"Allows incoming ICMP Echo messages." "1" "1" "1" "7" "1" "" \		"Allows incoming ICMP Echo messages." "1" "1" "1" "7" "1" "" \
	"8:0" "@PathToApplication,-10000" "" "" "" ""		"" "8:0" "@PathToApplication,-10000" "" "" "" ""
	Pop $0 ; return error(1)/success(0)		Pop $0 ; return error(1)/success(0)

Line 315:		Line 316:
	SimpleFC::AdvAddRule "Incoming requests (TCP incoming)" \		SimpleFC::AdvAddRule "Incoming requests (TCP incoming)" \
	"Allows incoming requests." "6" "1" "1" "7" "1" "PathToApplication" \		"Allows incoming requests." "6" "1" "1" "7" "1" "PathToApplication" \
	"" "@PathToApplication,-10000" "" "" "" ""		"" "" "@PathToApplication,-10000" "" "" "" ""
	Pop $0 ; return error(1)/success(0)		Pop $0 ; return error(1)/success(0)

Line 321:		Line 322:
	SimpleFC::AdvAddRule "Incoming requests (UDP incoming)" \		SimpleFC::AdvAddRule "Incoming requests (UDP incoming)" \
	"Allows incoming requests." "17" "1" "1" "7" "1" "PathToApplication" \		"Allows incoming requests." "17" "1" "1" "7" "1" "PathToApplication" \
	"" "@PathToApplication,-10000" "" "" "" ""		"" "" "@PathToApplication,-10000" "" "" "" ""
	Pop $0 ; return error(1)/success(0)		Pop $0 ; return error(1)/success(0)

Line 383:		Line 384:
	== Important Notes ==		== Important Notes ==

	*This plugin is running on Windows XP SP2, Windows 2003, Windows Vista, Windows ~~2008 and~~ Windows 7		*This plugin is running on Windows XP SP2, Windows 2003, Windows Vista, Windows 7, Windows 8, Windows Server 2012, Windows Server 8.1, Windows Server 2012 R2
	*Before you execute some plugin commands it is recommend to check for windows firewall service is running (SimpleFC::IsFirewallServiceRunning).		*Before you execute some plugin commands it is recommend to check for windows firewall service is running (SimpleFC::IsFirewallServiceRunning).
	*All functions with the prefix "Adv" are only for Windows Firewall with Advanced Security (Windows Vista and above). It is recommend to use these functions on the operating systems which supports the Windows Firewall with Advanced Security. Nethertheless, the default functions without the prefix "Adv" can be used.		*All functions with the prefix "Adv" are only for Windows Firewall with Advanced Security (Windows Vista and above). It is recommend to use these functions on the operating systems which supports the Windows Firewall with Advanced Security. Nethertheless, the default functions without the prefix "Adv" can be used.
	* If you have any suggestions, comments or questions please mail me: mailto:rainer@speed-soft.de		* If you have any suggestions, comments or questions please mail me: mailto:rainer@speed-soft.de



	[[Category:Plugins]]		[[Category:Plugins]]