



However, the porter (the OS) does indeed handle that packet, if only briefly. The same is true of TCP ports - if there's no application listening (or "bound") to the port, the OS won't pass it into an application. It'll be left in the lobby with the porter and probably abandoned. If nobody lives in that apartment, your package won't be received. In order to send a packet to this address, you must first own an apartment in real life so you have a return address. The IP address maps to the address of the apartment block and the TCP port to the apartment number in the building. Getting traffic on the internet over TCP/IP is kinda like sending post (with a few inconsistencies) to an apartment block. This also means that any device on the network or the internet can send traffic through any port on the computer. This means that any application running on the computer can send any traffic from the computer through any port to any device on the network or the internet. Also, turning the firewall makes everything nice and secure right?įirstly, I am sure that there is more to the Windows Firewall than this so what am I missing? Secondly, what have I misunderstood or got plain wrong about how the firewall works? Thirdly, is it as important as I think it is to have the firewall switched on at all times (I think it is very important) and lastly is the firewall as effective as I think it is (I am currently under the illusion that it is very effective). Also any device that can connect to the computer (as a rule of thumb any device that can ping the computer) can send data through any port. If the firewall is off, every port is open and any application running on the computer can send and receive data through any port if it is designed to do so. In this scenario the user clicks yes and Windows configures the firewall to allow the application to function properly on their behalf.

When the firewall gets switched on, every port is closed (as in inbound and outbound traffic on every port is blocked) unless the user specifically opens one, or Windows UAC indicates to the user that a particular port on the firewall needs opened for an application to run (this usually happens when an application is being installed). My understanding of the situation is that, when the Windows firewall is off, every port on the computer (all 65535 of them) is fully open.
