Hi,

I am shielding Studio One from receiving incoming and outcoming access from and to the internet. But I would love to use the Studio One remote app - which obviously can not find Studio one in this particular case.

How can I add an exception to the current firewall rule, therefore allowing only both apps to see each other? However leaving the internet access of Studio one besides that as restricted as already set-up.


thanks

 

If the apps are only communicating locally, you just need to setup a firewall rule for all devices on your Lan.

https://geekoverdose.wordpress.com/2020/06/21/windows-firewall-rule-to-block-internet-but-allow-lan/

btw i'm on Mac. if you need application specific help with the remote plugin/app, someone on pc can elaborate.

 

Thanks. I will look into that

 

Hey there, any updates? My phone scans and recognizes Studio One but it says that the pc has been deactivated to use with studio one.

 

If your phone is able to scan your local computer and get details from it like this, your problem is likely not your firewall or other Networking settings. It's probably your Studio One software installation. Maybe the version of it, or your settings inside the DAW. Something like that, and less like your connectivity to the machine. Your firewall would just block the connection and any scan to get such results.

 

Well, I'm happy to discover that Windows has not rule prioritization that can create contrasting and undefined mess, that's really a pita.
And I'm happy too that I always used a 3° party firewall since '97, Kerio being the first.

 

Do you mean like an Android app to PC and the other way round?

 

Basically, yes. The Logic Remote iOS app probably works the same way. Both devices ( 1 computer and 1 mobile or tablet) are on your lan, probably connected via wifi or maybe bluetooth. The Logic Remote is basically a touch screen mixer strip and channel control surface. You can tell some day it will be amazing.

The original poster was trying to keep his inbound/outbound rules blocking the DAW from the internet the same; but allowing lan/bluetooth type of connectivity over his Lan. The fact the devices can see one another at all, means the firewall is probably a rabbit hole. You could just disable your firewall temporarily to test that.

This is more like pairing a iphone to a computer and using sync in both directions. you could do that with no internet whatsoever. So the devices see each other, but are not authenticating correctly.

 

Then I see a problem, mostly related to the (android?) mobile device.
I personally had all my android devices rooted, so I always installed a (root) ip table firewall and had lot of apps that were accessing lan only, towards all other PC/devices in lan without accessing internet.

Unfortunately, nowadays it's more and more difficult to root android smart/tab devices, so the only way to circumvent this is to install a no-root firewall, that has some drawback (but it's something at least).
Even with that, there is not the absolute certainty that apps won't call home, or use Google Play as internet bridge.

 

ok, well in those terms. Let's say you have an Android device rooted, and you install one of these programs that gives you not only root access like an ftp server almost. Usually they can connect via bluetooth using valid network credentials between it and a bluetooth receiver. Like this thing, for an example: www.bestbuy.com/site/insignia-bluetooth-5-0-usb-adapter-for-laptops-and-desktops-compatible-with-windows-8-1-10-and-11-black/6500986.p. they are great for mobiles, btw. This sort of connection from the mobile device with the computer will be using very generic file services. protocols, or what have you.

But this connection is two way between an official remote app, and your DAW. It's a kind of proprietary handshake between the two, with all the appropriate digital signatures and other credentials. Rooting the device does not matter, because the app running on the mobile phone is a free app. There is no tampering to it. But when it connects with the desktop-based DAW, it is finding their little sync server, goes to authenticate with it, and then rejects the connection because the DAW installation has expired credentials. It's already attempting to handshake correctly to be able to even get a sniff of that information. Since the app is free, the only place for some credential being supplied by the computer that can expire is the pc-based DAW software. A free app is not going to expire. An incompletely k'd paid software certainly will.

 

Ok, clearer now.
I didn't know the inner working of SO.
I was referring to apps that you don't want to call home, like in my case a (paid) remote desktop that you want to restrict to lan only.
Non root devices gave me always problem.