Rule Settings

Application filtering rules control interaction of a particular application with certain network hosts.

To add or edit a rule

1.In Access to network resources section select the User-defined mode.

2.In Edit rule set for window press Add button to add a new rule or select the rule from the list and press the Edit button to edit the rule.

3.Configure the following parameters:




Rule name

The name of the created/edited rule.


The rule description.


The action for Dr.Web Firewall to perform when an attempt to connect to the internet is detected:

Block packets—block the connection.

Allow packets—allow the connection.


Rule status:

Enabled—the rule is applied for all matching connections.

Disabled—the rule is temporary not applied.

Connection type

The direction of the connection:

Inbound—the rule is applied when someone from the network attempts to connect to an application on your computer.

Outbound—the rule is applied when an application on your computer attempts to connect to the network.

Any—the rule is applied regardless of packet transfer direction.


Logging mode:

Enabled—register events.

Disabled—do not log rule information.

Rule settings


The network and transport level protocols used for the connection attempt.

The following protocols of the network level are supported:



IP all—any version of the IP protocol

The following protocols of the transport level are supported:



TCP & UDP—TCP or UDP protocol


Local address/Remote address

The IP address of the remote host. You can specify either a certain address (Equal) or several IP addresses using a range (In range), specific subnet mask (Mask) or masks of all subnets in which your computer has a network address (MY_NETWORK).

To apply the rule for all remote hosts, select Any.

Local port/Remote port

The port used for the connection. You can specify either a specific port number (Equal) or a port range (In range).

To apply the rule for all ports, select Any.

4.Click OK.