I would like to CFP create alerts for listening/waiting “connections” and have possibility to create rules for them.
That isn’t possible in current build (3.0.14.276) and I think that it should be.
Also, I would like to see filtering application connections by command line
Creating rule for “listening ports” IS /HAS BEEN possible. I have several of them.
In the rule definition set the direction to “In” (this sets Source to be the remote system and Destination to be the local system). This, by definition, is a listening port, since the remote system will be initating the connection request.
Then adjust the source and destination parameters needed.
Adjust the Source parameters to restrict the systems/ports you wish accept/reject connection requests FROM.
Adjust the Destination parameters to restrict the ports the connecting system must connect TO.