• Announcements

    • xper

      MSFN Sponsorship and AdBlockers!   07/10/2016

      Dear members, MSFN is made available via subscriptions, donations and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, become a site sponsor and ads will be disabled automatically and by subscribing you get other sponsor benefits.
Sign in to follow this  
Followers 0
vinifera

firewall rule time

8 posts in this topic

is there a way to see when (date) was certain rule (app blocked or allowed) ?

I don't see in fw settings anything that shows it

0

Share this post


Link to post
Share on other sites

In the registry it is the key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules

You can export that key to .txt format with regedit to see the last write time (for the entire key). If you export it to .reg format, on the bottom will be the last created values (but it's not guaranteed).

There are other registry tools that can read and display last write time of keys. I don't know if any of them can do the same for values (but I haven't looked hard). It might be impossible.

RegScanner from Nirsoft can search registry (keys only?) by date.

GL

Edited by GrofLuigi
0

Share this post


Link to post
Share on other sites

I meant more like

for each rule

as in when was each rule made :P

0

Share this post


Link to post
Share on other sites

I meant more like

for each rule

as in when was each rule made :P

Yes, I know, but I'm not sure it's possible.

GL

0

Share this post


Link to post
Share on other sites

seems it isn't

as firewall doesn't record jack s***

such disapointment...

0

Share this post


Link to post
Share on other sites

Now that you mentioned it, there might be something in the firewall log (if you enable it first), but I'm almost sure there will be something in the event log (if you manage to find the event :) ).

GL

0

Share this post


Link to post
Share on other sites

well event viewer shows nothing (probably coz it was flushed at some time)

and firewall log doesn't even exist on my PC :(

0

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0

  • Recently Browsing   0 members

    No registered users viewing this page.