search

henrypp / simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
GNU General Public License v3.0
5.79k stars 466 forks source link

Cannot block apps that uses local VPN interface #986

Closed cowsay1 closed 1 year ago

cowsay1 commented 2 years ago

I use SimpleWall with "block all except my allows" policy, and Mullvad VPN.

And I faced with the problem that some (many) apps uses VPN local interface (10.6.0.5) and somehow they have unlimited internet access even i block everything and they dont have any rules.

It's most system apps and some user apps, even windows update in my situation blocked just becuase ip-blacklist still works for them.

I also tried to block loopback connections but no effect.

This is all my rules:

image

image

"Apps without internet access" in fact they have it. image

"Connections:" see the Telegram have connection , it works, but it not even in list with "Apps" rules. I didn't even seen pop-up notification when i first start it. image

Chaython commented 2 years ago

is the connection actually established? For telegram? I use proton VPN without issue. There are a ton of issues with vpn, here is an example of split tunneling, no resolution, no responses besides me... https://github.com/henrypp/simplewall/issues/911 I do not use split tunneling, I don't see the purpose. A VPN, is used to route through a server to have traffic encrypted/obfuscate from the rest of the network. If this is your use case, you should send all traffic through the VPN. Why? Because apps that use the local connection could have vulnerabilities, or could provide unencrypted messages/telemetry or other identifiable details that could make you more vulnerable. If your purpose is to change your region, for web browsing purposes. I recommend using your VPN's browser extension, some support per tab tunneling, so you can have a different region in different tabs.

cowsay1 commented 2 years ago

is the connection actually established? For telegram?

Yes it was established

I roll back to 3.3.5 and it fixed everything.

Looks like #989 same issue.

ltguillaume commented 2 years ago

Well #989 is not the same, because in my case the connection was blocked, but it could perhaps have a similar cause.