tnodir / fort

Fort Firewall for Windows
GNU General Public License v3.0
1.1k stars 96 forks source link

Enhance Update Process: Auto-Close Programs & Block Traffic #237

Closed dashke closed 2 months ago

dashke commented 2 months ago

Description To bolster security during updates, FortFirewall should automatically close its programs and block all traffic until the update is complete.

Suggested Behavior

  1. Auto-Close Programs: Close all running instances during updates to prevent operational issues.
  2. Block Traffic: Temporarily halt all network traffic to maintain security during the update.

Rationale Security: Prevent potential attacks during update downtime. Stability: Ensure smooth update process by closing programs.

Impact Enhanced security and stability during updates, fostering user trust in FortFirewall's reliability.

tnodir commented 2 months ago
  1. Auto-Close Programs: Close all running instances during updates to prevent operational issues.

This was done in the v3.12.3 per #140:

  1. User clicks a Download, then Install buttons in the My Fort: About tab
  2. Service notifies his clients to restart by delay-start.bat script (which waits for Installer completion)
  3. Service runs the Installer in silent mode
  4. Installer updates the files and launches the Service
  5. Service removes the Installer's file
  6. Waiting clients are started
  1. Block Traffic: Temporarily halt all network traffic to maintain security during the update.

I think, this should be done, when a boot filter is installed via the Options: "Block traffic when Fort Firewall is not running" flag is turned on.

Currently, Installer always uninstalls the boot filter before installing new driver.

I'll change it to not touch the installed boot filter during the upgrade.

What do you think?

dashke commented 2 months ago

Oh that's awesome, thanks Nodir, that would be great!

tnodir commented 2 months ago

Please test the upgrading from v3.12.3 to new v3.12.4.

You can downgrade to v3.12.3 just by installing over v3.12.4.

tnodir commented 2 months ago

Please reopen on any auto-update issues.