3 ms·
I almost immunized my Win10 _by accident_ thanks to paranoia about blocking W10 spying. >netsh advfirewall firewall show rule name=all … Rule Name:
by rasz_pl 10y ago
I almost immunized my Win10 _by accident_ thanks to paranoia about blocking W10 spying.
>netsh advfirewall firewall show rule name=all
…
Rule Name: Core Networking – Dynamic Host Configuration Protocol (DHCP-In)
———————————————————————-
Enabled: Yes
Direction: In
Profiles: Domain,Private,Public
Grouping: Core Networking
LocalIP: Any
RemoteIP: LocalSubnet
Protocol: UDP
LocalPort: 68
RemotePort: 67
Edge traversal: No
Action: Allow
Rule Name: Core Networking – Dynamic Host Configuration Protocol (DHCP-Out)
———————————————————————-
Enabled: Yes
Direction: Out
Profiles: Domain,Private,Public
Grouping: Core Networking
LocalIP: Any
RemoteIP: LocalSubnet
Protocol: UDP
LocalPort: 68
RemotePort: 67
Edge traversal: No
Action: Allow
Basically I only allow DHCP from LocalSubnet. Of course according to Microsoft LocalSubnet :
“The keyword localsubnet, which includes all addresses that are on the local computer’s current subnet.”
but how the hell does your computer know “local computer’s current subnet” BEFORE it receives its IP from DHCP server???
Hmm, I think Ill just hardcode this to private subnet (192.168.0.0/16).