Thanks for non-terminating callout in WFP

[foxtrotcz]

Hi,
I am checking firewall solutions and ways how they can work together. For example when one can filter by digital signature and other by wildcard filepath or wildcard domain.

And I discovered one of the things that makes firewalls not work nice together. WFP Action: FWP_ACTION_CALLOUT_TERMINATING when used for permit/allow rule. I found it in Portmaster and it basically causes "force allow" without asking any other part of WFP (other firewalls) if the packet should be blocked.

So I just want to thank you for using FWP_ACTION_CALLOUT_UNKNOWN instead in Fort and allowing permit/allow action to go down the WFP chain which allows coexistence with other firewall software.

[tnodir]

Hi and welcome!

Yes, I've also tested it with other firewalls and wanted to play nicely with them.

Also there's a "Ignore, if not blocked or allowed" filter mode to test other firewalls.