pylorak

It is true that there is a similar risk in theory with the malware replacing/modifying the installed application itself. Still, there are a few key differences and important notes here:...

As stated, I will accept PRs with this feature as long as it fulfills quality and efficiency constraints (see my comment above). I will not personally develop this feature however.

I'm not totally averse to this idea (with some sensical restriction to keep the feature relatively secure), but currently I cannot invest the necessary time to implement it. It might...

This problem should plague other firewalls (EDIT: firewalls that don't install drivers) as well and is not specific to TinyWall. Unfortunately that's just how it is. The best thing that...

@JB-DX "You need to face reality" & "And it shouldn't be difficult to implement, just examine the parent tag of a process." No need to be snarky, just stay constructive....

> [@pylorak](https://github.com/pylorak) I admit that I don't know the "child inheritance" feature. Can you tell me where I find info about configuring it? Maybe that already would fit my needs....

> I try to compile TW for .NET FW 4.8, almost everything is done, the last problems: > > 1. Incomplete class: > > > `internal partial class SourceGenerationContext :...

'System' is not a wildcard, it is the kernel (and any drivers running inside it). It should be blocked by default, though I guess it is possible for a driver...

Yeah, that's ICMP traffic, which is handled specially by the kernel. It kinda has to, given that ICMP traffic plays a large role in IP routing, connectivity and error diagnostics....

It should be able to block it indeed. This will need further testing and possibly a fix.