Windows Firewall Control vs dnscache

[bcampa]

Checkiing my connections log I find hundreds of blocked entries for dnscache, source addr is my machine, destination is my router. System seems to be running fine. Is best practice to allow or block dnscache?

 

Thanks for any help!

[daemonjax]

I'm a little surprised no one has answered this.

Yes, of course you allow the dnscache service to communicate with your router. 

That is how all apps on your machine should be doing their dns resolution -- through the dnscache service.

If, for some niche reason you didn't want to use dnscache service to cache dns results from your router, then you just wouldn't run the dnscache service.  And you wouldn't be asking this question.

It's best to leave anything else that's trying to access your router for dns queries blocked.  Everything should flow through dnscache.

Hope that helps.

[daemonjax]

I can't edit my post, but I just thought I'd mention an example...

If you're totally locking down a machine with a static ip address, except for browser access to https sites, you can leave everything blocked except for two rules:

1) the browser's executable, obviously -- just destination tcp ports 443 and 8080 are needed.

2) the dnscache service from -- localhost to the router (packet type and ports can be left as any).

 

 

[Porthos]

2 hours ago, daemonjax said:

I'm a little surprised no one has answered this.

Malwarebytes Windows Firewall Control support is handled by Binisoft at this time. You can contact them via their Contact page at https://www.binisoft.org/contact or by emailing support@binisoft.org.

Additionally, Wilders has a thread for WFC here if you want to try asking the members there.

 

Edited March 18 by Porthos