Unplanned
Last Updated: 18 Oct 2019 13:10 by ADMIN
David
Created on: 06 Oct 2019 07:51
Type: Bug Report
0
Firewall IP scope is cleared after update

Each time fiddler is updated entries in the firewall rule allowing remote connections is cleared.

 

3 comments
ADMIN
Simeon
Posted on: 18 Oct 2019 12:52

Hi David,

I have created an issue in the backlog for review.

Regards,
Simeon
Progress Telerik

Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items
David
Posted on: 11 Oct 2019 12:36

Hi Simeon,

Yes I do alter the Fiddler proxy rule within the firewall manually, I am not aware of any other way to only allow specific IP addresses to access the Fiddler app remotely.

Each time I re-install fiddler and do not remember to add IP addresses back into the firewall rule, it is left open and access comes in from all over the www until I re-enter the allowed IP addresses.

This does seem like a security issue of sorts. I have a dozen or more IP addresses to manually add back into the firewall rule after each re-install?

ADMIN
Simeon
Posted on: 09 Oct 2019 11:54

Hello David,

During installation of Fiddler, the installer firstly removes any old rule with this command:

ExecShell "" "$SYSDIR\netsh.exe" 'advfirewall firewall delete rule name="FiddlerProxy"'

Then it adds the new rule with this command:

ExecShell "" "$SYSDIR\netsh.exe" 'advfirewall firewall add rule name="FiddlerProxy" program="$INSTDIR\Fiddler.exe" action=allow profile=any dir=in edge=deferuser protocol=tcp description="Permit inbound connections to Fiddler"'

This is how the FiddlerProxy rule is updated in case the user installs Fiddler in a different directory.

If you are editing the FiddlerProxy rule by hand your changes will be lost. Please, let me know if this is the case and we will try to provide a solution.

Regards,
Simeon
Progress Telerik

Do you want to have your say when we set our development plans? Do you want to know when a feature you care about is added or when a bug fixed? Explore the Telerik Feedback Portal and vote to affect the priority of the items