1420739 - whitelist for outgoing connections in Windows Firewall

Status: RESOLVED WONTFIX

(Firefox :: Installer, defect)

Description

[Mark]

It appears Firefox is no longer being white-listed in Windows Firewall for outgoing connections.

0. Set the default policy for outgoing connections to "blocked" (white-list mode) in the Windows [Defender] Firewall.
1. Install Firefox 57.
2. Firefox is not able to request any remote resources.

No popup regarding any post-installation white-listing appears, neither by Windows nor displayed by Firefox or its installer. The average user doesn't know the cause nor what to change for relief.

Actual result:
- No rules have been added to the Windows Firewall, for outgoing connections and Firefox related programs.

Expected result:
- Add Windows Firewall white-list entries.

I suggest adding another page in the installer with the option "white-list in Windows Firewall" checked by default, and then adding those entries no matter what policy the firewall is in.

Comment 1

[Molly Howell (she/her) (mostly inactive)]

We create firewall rules to allow inbound connections on private networks, we just don't do anything for outbound. This is how most installers for Windows applications behave, including those that need outbound networking to perform core functions. Considering how rare it is for the Windows firewall to be configured as deny-by-default for outbound connections, I don't think this option is something that we need to be carrying in our installer.