'"What to block" is done by application, your DAW, plugins, other applications. For Mac, our system firewall cannot block random files, only applications. But an application firewall can. For Mac, the plugins can be .vst,.vst3, or .component formats and they are all located in a single folder. On Windows you may choose to block .dll .ocx and whatever other dependency files related to your plugins. But the port numbers are irrelavent if the firewall is blocking per application, using it's Process Identification number. Called PID.

The only firewall I recommend to anyone is LuLu Firewall for MacOS, and it is free. I'm not trying to sell anyone Windows or a Windows firewall. You should take up your issue with such 3rd party firewalls with pretty much anyone else on this forum. Because they almost all run one.

If you want to go figure this stuff out on your own, you take your time and go read about OSI model and Application Layer vs Operating System. Look on ZoneAlarm support page about how their firewall hooks into the operating system, like it is some selling point. But in reality it can clamp down on your OS like a drum.

Do you actually think the entire PC computing world have just been scammed with all these third party software products? Good, go tell someone who runs Windows about it. But I am rather confident that all of the computers on the internet which are protected by software firewalls have them installed for a reason. That's a multiple-millions of dollars assertion for you to say they do not; so prove it to someone.

If Windows firewall is good enough, how are they disabling botnets with many thousands of computers affected and running.....Windows! Do all these people who run just regular old office computers, or are home looking up wiki or Facebook; disable Windows Defender and other security defaults? Do they login as root/admin too, all of them?

I'm sure you would like to scurry off and forget the fact that you are off-topic and you wrote me a book.

 

Last edited: Sep 24, 2023

At least:
outbound/inbound warning pop ups, training mode;
and if you know how to use it, HIPS (i.e. prevent those damned apps once installed or uninstalled to open unrequested forms in browsers);
along sandboxes and other amenities not straightly related to firewalling.

 

This post is BS. I guess every Windows user on here is stupid for using an Application Layer firewall to go along with their Windows stuff? That is what you are suggesting, I am not sure how discussing firewalls in a thread about firewalls is off-topic.

 

Last edited: Sep 24, 2023

OK, let's get back to the topic.
The big difference between windows firewall and third party firewalls, is that good third party firewall can be set to ask for every connection attempt, so you can block them, but windows firewall takes the decision for you. And that's a mess.

 

Honestly, a thread with a simple list of apps that call home, what will it bring?
So going a bit off topic of that list and speaking about the solution is not bad.

 

Just because every one has been infected by the 3rd party bug means doesn't mean I've been! I've been in IT for far too long to just follow the 'stupid' heard!

Let me give you an example...Symantec is one of the biggest companies on antivirus and security in the world and used by one the biggest companies in the world but it's actually one of the worst antivirus/firewall programs with horrendous support I've ever encountered. Yet it has been embraced by many big companies around the world. Why? Because other companies also rely on them. It's a chain reaction of..."well, if he thinks it's good, it must be good".

Like I said I've been in IT for al long time and I know how it works. The 'worst' programs get endorsed by biggest companies. And the same goes for this community. They all infect each other by stating that 'you need this'! Everybody agrees and no one ever looks back! No one wants to question what 'upper decider' has decided for the group. So it has been decided that this is the best program (firewall) for everyone that uses wares. So everyone agrees it's better to install this or that 3rd party firewall. Does it help? NO! Because If been using warez for 25 years now with my 'simple' Windows firewall and never had any issue whatsoever! R2R, VR, Moria, you name it... Just respected the host file adjustments of R2R. So who really needs any 3rd party programs? Believe me, 3rd party firewall programs are just a load BS. They do just the same as Windows.They only want you to believe they offer added value!

This has nothing to do with a firewall! But has everything to do with all those dumb people that click on obvious links in their email and have no up-to-date virus scanner! Again, this has nothing to do with a firewall.

 

OK, now let's get back to the calling home plug-ins and the solutions.
We're not going into all connection problem situation here.

 

My solution is that 1. My daw is blocked to the internet by my firewall
2. The firewall is set to ask for any new connection attempt and learn from my answers.
Obviously, I take the time to check what is trying to connect. But anyways these decision are easy to revert in the firewall config. So in case of doubt I say no.
After a week the firewall is configured and it only makes a few alert, generally when something new is installed.

 

Sure it does. An infected machine creating an outbound solicitation or connection is absolutely the job of your firewall to block that traffic. Just like a plugin being able to either send or receive data as a part of it's "home-calling" functions would be handled by a firewall application.

It has nothing to do with sister site versions of software, because the legitimate users leak that same data. There are people who do not use any audio software at all, but do not wish to be giving away all this free information; because they want privacy. It's why you see Opt-in options to share data with the vendor for a specific program or plugin while installing them. You even see these options on everyday regular old websites now, which will allow you to reject/deny cookies. They are not doing this for fun, they are doing it because there are privacy advocates in this world.

 

Last edited: Sep 24, 2023

The answer is simple! You'll only get these questions when you've installed an additional firewall other than the standard Windows firewall or set the firewall to act on any suspicious behaviour?

Like I said earlier, very few plugins call home! People here are 'assuming' that they all do and think they need a 3rd party firewall to prevent this from happening? But IMO this is total BS!

Again I've been using all sorts of plugins over 25 years and never had any sort 'call home' with the standard settings of the Windows Firewall?

So strictly for plugins? I'd say...Go crazy and install what you want. But....always follow the instructions of the supplier!

 

You probably do not see them because you have the Firewall and Network Protection notifications turned off. That doesn't mean the events are not happening. It just means that you do not see that they are happening. Two software firewalls at the same time may actually create false positives; so you do need to sort of know what you are looking at.

I see new Mac plugins get caught attempting to access the internet and go to the vendors' websites by LuLu all the time. Many times they are demos just going out to check for updates, but you have no idea what data is really transmitted in both directions. You could see these things with a Live monitor/protocol analyzer like Wireshark and go down that rabbit hole if you want. https://www.wireshark.org/about.html

 

everytime I format, I install TinyWall: it blocks EVERYTHING by default, then I tell him "hey, let me use the browser, let me use this application; the rest, can stay where they are." so i don't have to worry about everything else. it's a bit of a nuisance if you use your main PC as your music making tool, because sometimes a lot of applications let you download the installer, and then connect to the internet (i hate those).
i found about tinywall a long time ago, probably someone from here mentioned it.

 

Let me stop you there! You're assuming that a machine has been infected? I referred to a healthy machine! You’re now confusing a firewall with a virus scanner which are actually totally different things? The virus scanner should prevent, the firewall can block what a virus scanner didn’t detect? Totally different things!

Again, if you are not stupid enough to run your login as admin, you can run into problems like this!

Not really sure where you want to go with this? But I more and more get the feeling that you are mixing up a virus scanner, which should prevent issues with your firewall, than an issue with a firewall itself?

But like I said earlier, I’ve been installing warez for over 25 years without any issues whatsoever? Mind you…I’ve always been careful and used a good virus scanner (ESET). Also sometimes used a sandbox in the old days? But I never ever encountered any issues with my firewall.

Issues with firewalls start when an infection occurs!

But like I said. We were talking about firewalls. Not virus scanners!

People that count on their firewall to block all viri that they didn’t see coming themself or their scanner didn’t detect are per definition fucked in this digital world!

 

No, I use a good virus scanner so I don't have to deal with this BS! If there's no problem in your system it means your firewall doesn't have to act!

I thought Mac users where so proud they didn't have viri?

Anyway, what the F**k are you concerned about? Of course data goes from your computer to the vendor of the plugins you use? Who cares!

Like I said, I've been using plugins for about 25 years! I've never had any problem! Relax! Whatever is happening behind your back, your firewall is certainly not preventing it from happening!

 

What does that comment indicate to you? Someone who is opening emails from unknown sources.

Ok you are on ignore from now on. Let me know when you pass OSCP. CEH. At this point, I'd settle for someone with a Comptia Network+. Until then, adios.

 

Yes, it means people are careless and don't run an up to date virus scanner!

 

Yeah, that's the price you pay for installing a question and answer firewall?

So tell me? If you install an application you 'really' want to use and it asks you to connect outside? Do you refuse it or do you approve?
And for the next, and the next...and so on?

If you're not completely sure what to answer on every application question. What's the point of installing this 'Tinywall' anyway?

 

Last edited: Sep 24, 2023

i have everything i need really, about music. i haven't installed anything new in months, probably a year.
other than checking e-mail and using websites for work, i don't need anything to connect to the internet.
if i install an application that i need and it wants to connect to the internet and I KNOW it's not a problem, then i let it through sure.

 

Great to hear for a change! Not many people are satisfied with what they have today? Good for you!

 

Sorry, I don't even know how to 'ignore' people here? And I would never ever do something like that anyway? Maybe it was because I was replying at that moment?

 

Last edited: Sep 24, 2023