Individual rules for each Windows Service, in the Firewall

Comodo Internet Security - CIS Wishlist - CIS
1

  1. What actually happened or you saw:
    Currently, the Comodo firewall allows the creation of rules for the “Svchost.exe” executable, only for the executable itself and not for the individual Windows Services hosted by it.

  2. What you wanted to happen or see:
    I would like to be able to set rules on the single Service hosted by “Svchost.exe” and not only on the executable “Svchost.exe”.

  3. Why you think it is desirable:
    This feature, present in other firewalls, would allow you to create rules to manage traffic on individual Windows Services.

  4. Any other information:
    As for “Svchost.exe”, it is a system file that hosts one or more Windows Services.
    Normally, multiple instances of this executable are active in the system and every istance host various Services.
    Comodo does not allow you to set rules for each Service but only for the “Svchost.exe” executable.

The “Windows firewall” allows you to treat the services hosted in “Svchost.exe” individually.
They informed me that also the “Net Peeker” firewall, present here, also has this feature.

9 Likes
2

Excellent suggestion imo, i wish more people would chime in so your suggestion would come to fruition.

3

Fully agree that the fine filtering of the individual windows services running under the various svchost.exe instances would be a very welcome and important feature, which would give CF/CIS an edge over most other firewalls.

4

This would be an excellent addition, I’ve been hoping for such a feature forever

5

@C.O.M.O.D.O_RT could you please (re)confirm if this request is (still) considered by the development team? Noticed you announced to post feedback here: Specify FW/HIPS rule for particular service name, not just file/process - #28 by C.O.M.O.D.O_RT

The functionality seems to be a standard part of Windows Firewall Technologies, “the INetFwServiceRestriction interface (netfw.h) provides access to the Windows Service Hardening networking rules”: INetFwServiceRestriction (netfw.h) - Win32 apps | Microsoft Learn

Thanks in advance!

6

Hi infosec,

We have taken this feature request to the related team.
We will keep you posted.

Thanks
C.O.M.O.D.O RT

1 Like
7

Even though some time has passed, it is still a very reasonable suggestion that I have only just read. I have missed this too.

8

This request is now listed by @Umut as number “64-) Improvement – Ability to set rules on the single Service hosted by “Svchost.exe”” in the CIS 2025 is now LIVE! - #252 by Umut
Please inform in that thread if you think this would be an important feature as well as per his request.

1 Like