henrypp / simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
GNU General Public License v3.0
6.27k stars 487 forks source link

[Bug] Compatibility with GoodByeDPI #1726

Open SeriousHoax opened 8 months ago

SeriousHoax commented 8 months ago

Checklist

App version

3.7.8

Windows version

Windows 11

Steps to reproduce

If I use https://github.com/ValdikSS/GoodbyeDPI then I can't access internet unless I give System "ntoskrnl.exe" internet access. Is there anyway to use GoodByeDPI without giving "ntoskrnl.exe" full outbound internet access?

Expected behavior

Access internet

Actual behavior

Can not access internet

Logs

"‎16-‎Feb-‎24 ‏‎9:25:56 PM","NT AUTHORITY\SYSTEM","System","192.168.0.200","4530","44.214.110.218","443 (https)","tcp","FWPM_LAYER_ALE_AUTH_CONNECT_V4","Internal\BlockConnection","#74207","Outbound","Blocked" "‎16-‎Feb-‎24 ‏‎9:25:56 PM","NT AUTHORITY\SYSTEM","System","192.168.0.200","4518","45.90.28.0","443 (https)","tcp","FWPM_LAYER_ALE_AUTH_CONNECT_V4","Internal\BlockConnection","#74207","Outbound","Blocked" "‎16-‎Feb-‎24 ‏‎9:25:56 PM","NT AUTHORITY\SYSTEM","System","192.168.0.200","4461","142.250.182.69","443 (https)","tcp","FWPM_LAYER_ALE_AUTH_CONNECT_V4","Internal\BlockConnection","#74207","Outbound","Blocked"

ghost commented 7 months ago

That's not a bug. It is how GoodbyeDPI works. "System" includes "ntoskrnl.exe" and "System" is used for all kinds of connections, such as ICMP/Ping.