tnodir/fort

Enhance Update Process: Auto-Close Programs & Block Traffic

dashke opened this issue · 4 comments

Description
To bolster security during updates, FortFirewall should automatically close its programs and block all traffic until the update is complete.

Suggested Behavior

  1. Auto-Close Programs: Close all running instances during updates to prevent operational issues.
  2. Block Traffic: Temporarily halt all network traffic to maintain security during the update.

Rationale
Security: Prevent potential attacks during update downtime.
Stability: Ensure smooth update process by closing programs.

Impact
Enhanced security and stability during updates, fostering user trust in FortFirewall's reliability.

  1. Auto-Close Programs: Close all running instances during updates to prevent operational issues.

This was done in the v3.12.3 per #140:

  1. User clicks a Download, then Install buttons in the My Fort: About tab
  2. Service notifies his clients to restart by delay-start.bat script (which waits for Installer completion)
  3. Service runs the Installer in silent mode
  4. Installer updates the files and launches the Service
  5. Service removes the Installer's file
  6. Waiting clients are started
  1. Block Traffic: Temporarily halt all network traffic to maintain security during the update.

I think, this should be done, when a boot filter is installed via the Options: "Block traffic when Fort Firewall is not running" flag is turned on.

Currently, Installer always uninstalls the boot filter before installing new driver.

I'll change it to not touch the installed boot filter during the upgrade.

What do you think?

Oh that's awesome, thanks Nodir, that would be great!

Please test the upgrading from v3.12.3 to new v3.12.4.

You can downgrade to v3.12.3 just by installing over v3.12.4.

Please reopen on any auto-update issues.