Would it be at all feasible to firewall most of Windows background processes?

Operating Systems & Open Source Windows
1

So, I dislike the glaring ability for Win10 to just change things in the background (updates) and send/receive who knows what between what parties. I disabled pretty much everything in the Privacy section but I still don't feel very private.

I was thinking it might be possible to block 99% of Windows from even being able to use the network and only allow through the things I want to use ie Steam, games, applications I install, etc.

Is this at all feasible? Obviously some things would still need to be allowed like the update processes, but by and large what really needs network access all the time?

2

yes, its possible. But then again its ms you're talking about... their hacks are hacks of hacks.

3

Any way to facilitate doing something like this? The granularity of Windows Firewall is.. lacking.

4

possible. lot of work. it would require a external firewall like pfsense to block it, because we cant trust windows to follow its own rules. (Its like the government). windows 10 has been known to bypass the hosts files.

1 Like
5

Blacklist the IPs on your router. If you don't have that functionality you could get a raspberry pi with a usb ethernet card and make it a firewall.

Edit: I'm too slow.

6

best way of handling this is to do either

  • Create hardware firewall (either small pc or something micro) and install pf firewall over there... blocklist all ms ip's and countries you do not trust. Including companies you do not trust.

  • Create kvm, store all your important private things inside your linux setup, and exec games etc from windows when you need it. You may have pf installed on your base linux system anyway.

in both cases disable ipv6

1 Like