PyWall

A small app to make it easy to administrate simple firewall configurations.

What is it? ?

This is a small application, written in Python and Qt, that makes it easy to block or allow applications from access to the internet, it contains a graphical user interface and a shell extension, so you may choose between the benefits of an easy-to-use GUI app with the efficiency of just right clicking any folder or file for maximum convinience!

PyWall was heavily inspired by OneClickFirewall by Winaero, and you should totally check that app out!

What does it do? ?

This app esentially writes a rule to the Windows Firewall to deny access to just about anything, by default only executable files will be taken into consideration.
As a consequence of interacting directly with the Firewall, this app requires elevation to properly work.
This app does not have the ability to allow internet access for apps that have already been blocked by means other than PyWall itself, for instance custom firewalls, previous firewall rules, etc.


PyWall also has the ability to block or allow entire folders (which was the main reason behind its development, since OneClickFirewall lacks the ability to do so ?), the way it does this is by sorting through the entire folder to look for all files with a matching type, then it will either block or allow all matches, this is done recursively, meaning that every folder inside the initial selection will be scanned, so please be careful with what you select!


The code was written (to the best of my ability) with the intent of being read by just about anyone, so go right ahead and look through my spaguetti code by yourself if you want to know how the app works in more detail!

False positives ☣️

As previously mentioned, this app interacts directly with the firewall, this is done via console command through the use of the OS library from Python, this, in
conjuction with the fact that it requires elevation to work, having to check for said elevation, has made it such that five security vendors have flagged this app as "malicious", this is what's commonly described as a "false positive".

As seen in the attatched VirusTotal report, better (and quite frankly more reputable) antiviruses than those five do not detect PyWall as malware, because it isn't, even the aforementioned OneClickFirewall has a similar problem, though greatly reduced, this is probably due a combination of the relatively reduced capabilities and better coding of the software.


You are free to read the code and compile it yourself, use the artifacts available by clicking on the latest run here (as the process and code by which the program is compiled are freely available for anyone to see and scrutinize) and review/use the .iss script used to create the installer available in the "releases" section.

PSA ?

I believe it to be important to remind people of the potential dangers of programs that interact with the security features of your system, this is why it is so valuable to be able to review what a certain piece software does and doesn't do, as such, please excercise caution with what you install on your system!
If you do not trust a particular piece of software, you can just not install it, use a sandbox or block its internet access to make having it on your system a bit more secure, and, since you're already here, why not use PyWall for the later? ?.

GitHub - p-yukusai/PyWall: A small app to make it easy to administrate simple firewall configurations.
A small app to make it easy to administrate simple firewall configurations. - GitHub - p-yukusai/PyWall: A small app to make it easy to administrate simple firewall configurations.