Blocking & firewall rules
Block apps, countries and website categories, and manage every Windows Firewall rule.
Blocking in NetSecWall: rules and what they actually do
A blocked app isn't killed or changed; it just loses network access. NetSecWall can block an app, a country, a website category or everything, and lists every rule it makes in the Rules tab.
Filtering modes, profiles and the panic switch
Filtering mode decides how NetSecWall treats new apps: Monitor only, Learning, or Block all outbound. Profiles are one-click presets for which website categories are blocked.
How to block an app from accessing the internet
Right-click the app in the Live tab and choose Block this app, then permanent, 10 minutes or 1 hour. NetSecWall adds a block rule and closes the app's open connections.
Unblock an app or remove a rule
Open the Rules tab, select the app's block rule and delete it. NetSecWall removes the rule and forgets the block, so it doesn't come back the next time NetSecWall starts.
Learning mode: approve each new app before it connects
Turn on Protection ▸ Filtering mode ▸ Learning. A program new to NetSecWall is held back the moment it connects, and a pop-up asks you to Allow, Allow once or Block it.
How to block a country's IP ranges on Windows
In the Live tab, switch View to By Country, right-click the country and choose Block all IP ranges. NetSecWall adds outbound Windows Firewall rules for that country's addresses.
Block website categories: ads, adult, gambling, social media and more
Open Protection ▸ Content categories… and tick Block for any of the 13 categories, or pick a Profile preset. NetSecWall then blocks the addresses those sites resolve to, in every app.
How to block a specific domain or website
Add the domain to a content category that is set to Block: Protection ▸ Content categories…, select the category, type the domain and click Add. Its subdomains are blocked too.
Cut all internet access instantly with Block all outbound
Choose Protection ▸ Filtering mode ▸ Block all outbound (panic). Every program on the PC loses internet access until you switch the filtering mode back to Monitor only or Learning.
Windows Firewall rules or the WFP packet filter: which engine to use
NetSecWall enforces blocks with Windows Firewall rules (the default), its own WFP packet filter, or both. Keep Windows Firewall unless another tool keeps overriding NetSecWall's rules.
Using NetSecWall alongside another firewall manager
When another tool manages Windows Firewall, NetSecWall shows an amber banner. Take over lets NetSecWall manage the rules; Companion mode leaves blocking to the other tool.
Manage every Windows Firewall rule from the Rules tab
The Rules tab lists NetSecWall's blocks and, on request, every rule in Windows Defender Firewall. Turn the firewall on or off, filter, create, edit, disable, delete and export rules.
Create a custom firewall rule for a port, address or inbound traffic
In the Rules tab, click New rule… and set the direction, action, protocol, program, ports and addresses. The result is an ordinary Windows Firewall rule that stays whether NetSecWall runs or not.
See what was blocked in the Windows firewall log
Open Protection ▸ Blocked connections (firewall log)… to see up to 300 recent blocked connections. Windows only records them after you turn on one audit setting with auditpol.