Advanced Firewall Rules and Port Management

For users who need fine-grained control over network access, True Protection by Jag offers an advanced rule editor for the built-in firewall. This guide covers creating complex rules, managing port configurations, and setting up application-specific policies.

Understanding Rule Priority

Firewall rules are evaluated in order from top to bottom. The first matching rule is applied. This means more specific rules should be placed above general rules:

Priority 1 (Highest): Explicit block rules for known malicious IPs
Priority 2: Application-specific allow rules
Priority 3: Network zone rules (home, work, public)
Priority 4 (Lowest): Default policy (allow or block)

Creating Advanced Rules

Step 1: Navigate to Settings > Firewall > Advanced Rules.
Step 2: Click Create Rule.
Step 3: Define the rule criteria:

Application: Select a specific program or choose "Any."
Direction: Inbound, Outbound, or Both.
Protocol: TCP, UDP, ICMP, or All.
Local Port: Specify a single port, range (1024-65535), or "Any."
Remote Address: IP address, subnet (192.168.1.0/24), or range.
Remote Port: Target port on the remote system.
Action: Allow, Block, or Log Only.

Common Port Management Tasks

Block all incoming on a port: Create an inbound block rule for the specific port.
Allow a game or application: Create outbound and inbound allow rules for the application executable.
Block a country: Import a geo-IP block list from Settings > Firewall > Geo-Blocking.