Firewall Config Examples

USAGE

Add sections [FirewallRule1], [FirewallRule2] etc. to Launcher.ini

FirewallRule Keys:

Name			-	Rule display name (unique identifier)
Direction		-	Inbound, Outbound
Action			-	Allow, Block, Bypass
Protocol		-	TCP, UDP, ICMPv4, ICMPv6, Any
LocalPort		-	Local port number or range (e.g., 80, 8000-8080, Any)
RemotePort		-	Remote port number or range (optional)
LocalAddress	-	Local IP address or range (optional, default: Any)
RemoteAddress	-	Remote IP address or range (optional, default: Any)
Program			-	Path to program executable (supports %PAL:* variables)
Service			-	Windows service name (optional)
Profile			-	Domain, Private, Public, Any (comma-separated)
InterfaceType	-	Wireless, Lan, Ras, Any (optional)
Enabled			-	true/false (rule enabled state)
IfExists		-	skip, backup, replace
Required		-	true/false (show error if creation fails)
Description		-	Rule description
EdgeTraversal	-	true/false (allow edge traversal for inbound rules)
Security		-	Authenticate, AuthEnc, AuthNoEnc, NotRequired

Protocol-specific options:
ICMPType		-	ICMP type number (for ICMP protocols)
ICMPCode		-	ICMP code number (for ICMP protocols)

EXAMPLE

[FirewallRule1]
Name=MyApp HTTP Server
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=8080
Program=%PAL:AppDir%\server.exe
Profile=Private,Public
IfExists=replace
Enabled=true
Description=Allow HTTP access to MyApp server
Required=true

Real-World Examples

Example 1: Web Server Application

; HTTP server rule
[FirewallRule1]
Name=MyWebServer HTTP
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=8080
Program=%PAL:AppDir%\server\webserver.exe
Profile=Private,Public
IfExists=replace
Enabled=true
Description=Allow HTTP access to MyWebServer
Required=true

; HTTPS server rule
[FirewallRule2]
Name=MyWebServer HTTPS
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=8443
Program=%PAL:AppDir%\server\webserver.exe
Profile=Private,Public
IfExists=replace
Enabled=true
Description=Allow HTTPS access to MyWebServer
Required=true

; Management interface
[FirewallRule3]
Name=MyWebServer Admin
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=9090
LocalAddress=127.0.0.1
Program=%PAL:AppDir%\server\webserver.exe
Profile=Private
IfExists=replace
Enabled=true
Description=Local administration interface
Required=false

Example 2: P2P File Sharing Application

; P2P incoming connections
[FirewallRule1]
Name=MyP2P Incoming
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=6881-6889
Program=%PAL:AppDir%\MyP2P.exe
Profile=Private
IfExists=backup
Enabled=true
Description=P2P file sharing incoming connections
Required=true

; P2P outgoing connections
[FirewallRule2]
Name=MyP2P Outgoing
Direction=Outbound
Action=Allow
Protocol=TCP
RemotePort=6881-6889
Program=%PAL:AppDir%\MyP2P.exe
Profile=Private,Public
IfExists=backup
Enabled=true
Description=P2P file sharing outgoing connections
Required=true

; DHT UDP traffic
[FirewallRule3]
Name=MyP2P DHT
Direction=Inbound
Action=Allow
Protocol=UDP
LocalPort=6881
Program=%PAL:AppDir%\MyP2P.exe
Profile=Private
IfExists=replace
Enabled=true
Description=DHT network discovery
Required=false

Example 3: Database Server

; Database server port
[FirewallRule1]
Name=MyDatabase Server
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=5432
Program=%PAL:AppDir%\database\dbserver.exe
Profile=Domain,Private
RemoteAddress=192.168.1.0/24,10.0.0.0/8
IfExists=backup
Enabled=true
Description=Database server access
Required=true
Security=Authenticate

; Database replication
[FirewallRule2]
Name=MyDatabase Replication
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=5433
Program=%PAL:AppDir%\database\dbserver.exe
Profile=Domain
RemoteAddress=192.168.1.100-192.168.1.110
IfExists=replace
Enabled=true
Description=Database replication traffic
Required=false

; Management console
[FirewallRule3]
Name=MyDatabase Console
Direction=Inbound
Action=Allow
Protocol=TCP
LocalPort=8080
LocalAddress=127.0.0.1
Program=%PAL:AppDir%\database\console.exe
Profile=Any
IfExists=replace
Enabled=true
Description=Local database management
Required=false