Skip to content

SimpleDeFence 1.0.2

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Oct 18:35
v1.0.2
446a217
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SimpleDeFence 1.0.2

Fixes from a full code review: security hardening, rules that did not do what they said, installer
repair and uninstall, and the tray and settings drifting from what the service had applied.

Install

Download SimpleDeFence_x64.msi below and run it, or let 1.0 or 1.0.1 offer you the update in-app.

Windows 10 version 2004 (build 19041) or newer, or Windows 11, 64-bit.

Verify the download if you like — the SHA-256 is published in
updates/update.json,
and the in-app updater checks it for you before running anything.

Get-FileHash .\SimpleDeFence_x64.msi -Algorithm SHA256

Security

  • The service no longer writes logs where a standard user can redirect them. The interface now
    logs to your own profile, and the service's data and log folders are reset to administrators-only
    ownership and permissions, including a data folder someone else created first.
  • A custom install folder that non-administrators can write to is locked down.
  • Updates only come from this project. Download addresses must be HTTPS on this repository's
    GitHub locations, and an installer with a broken signature is refused.
  • Address and port rules reject malformed values — a /256 prefix used to become /0 and
    match every address.
  • The password box no longer accepts an empty password.

Fixed

  • "Allow for 24 hours" lasts 24 hours. It ended after 19.
  • Rules inherited by child processes match. They were installed with the wrong path format and
    never applied until the next full reload.
  • A Repair from the installer keeps the firewall installed, and a failed uninstall rolls back
    cleanly.
  • The installer's last page has an "Open SimpleDeFence" box, ticked by default. The app did not
    open after installing before.
  • The update check no longer stalls the service while it downloads.
  • The tray shows an unknown mode when the service is not answering, instead of the last one it saw.
    Switching to Learning from the tray asks first, like the main window.
  • Settings and Rules switches go back to what the service holds when a change fails.
  • Windows 11 is detected correctly, and several low-level path, adapter and filter reads are fixed.
  • An error inside a Windows callback no longer stops the service.
  • Exported connection logs cannot run as spreadsheet formulas.
  • A configuration file the service refuses is kept as config.rejected instead of being overwritten
    by the defaults.

Upgrading

Installed 1.0 and 1.0.1 clients are offered this release in-app. Your configuration, rules and
password carry over.

Thanks

SimpleDeFence is GPLv3 and stays that way — no paid tier, no upsell. If it is useful to you,
Ko-fi, Buy Me a Coffee or the
Sponsor button on the repository helps keep it going.

SimpleDeFence began life as a fork of TinyWall by Károly
Pados. Please do not report SimpleDeFence issues to TinyWall or its authors.

Assets 3
Loading