• Welcome
• Installation and setup
  • Learning Mode
  • Accessing Settings
  • Configuration
  • Banking Mode
  • RunSafer
• Using Online Armor
  • Status
  • Firewall
    • Creating Firewall Rules
    • Ports and Protocols
    • Firewall Status Screen
    • Firewall Logs
  • Domains
  • Programs
  • Files and Registry
    • Creating File Rules
    • Creating Registry Rules
  • Autoruns
  • Anti-Keylogger
  • Hosts file
  • History
  • Options
  • Debug
• Customer Support

Firewall

When using the Online Armor Firewall in Standard mode, you will most likely interact with the Firewall primarily through pop-ups, without the need to change the Firewall settings. In Standard mode you will only see one pop-up for each Unknown program that attempts to access the internet; you will not see further pop-ups regarding how the program accesses the internet.

Advanced mode is intended for advanced users that wish to exercise more control over how their computer can connect to the internet. In Advanced mode you will see pop-ups for Unknown programs that attempt to access the internet, and information on the protocol, the remote address and domain names associated with it, the port being used, and country of the connection being attempted.

Online Armor will automatically allow Trusted programs to access the internet by default to minimize the amount of pop-ups that you see. This option can be changed in the Options, under the Firewall tab.

Rules Tab

In Standard mode only the Rules tab is available, which offers basic control of the Firewall. If you are using a paid version of Online Armor then you can configure advanced options and they will still function while in Standard mode, but will be hidden.

To access the Firewall settings simply open the Online Armor Control Panel and select Firewall from the Main Menu on the left.

Programs List

Once a program has been Allowed or Blocked from connecting to the internet it will be added to the Programs list. The Programs list shows you basic information about the programs the Firewall has seen and allows you to change whether internet access is Allowed or Blocked for each program.

The Programs list is organized using a table with the following columns:

• Status – Shows whether standard internet access (TCP and UDP) is Allowed, Blocked or n/a (not applicable) for the program.
• ICMP (Advanced Mode only) – Shows whether ICMP is Allowed, Blocked or n/a (not applicable) for the program. These settings can also be toggled manually by the user between "n/a", "Block" or "Allow"; by clicking the individual cells in the table. Note: The value in the ICMP column defines whether or not the program is allowed to use ICMP while the ICMP tab defines the general rules for the ICMP protocol.
  • n/a – Indicates that ICMP has not yet been used by this program or that a permanent rule has not been created for it.
  • Allow – Indicates that ICMP is allowed for the program.
  • Block – Indicates that ICMP is blocked for the program.
• RAW (Advanced Mode only) – Shows whether use of the RAW protocol is Allowed, Blocked or n/a (not applicable) for the program. These settings can also be toggled manually between "n/a", "Block" or "Allow" by clicking the individual cells in the table.
  • n/a – Indicates that the RAW protocol has not yet been used by this program or that a permanent rule has not been created for it.
  • Allow – Indicates that the RAW protocol is allowed for the program.
  • Block – Indicates that the RAW protocol is blocked for the program.
• Program – Shows the file name of the program on your hard drive.
• Program name – Shows the name of the program.

Each row is color coded to indicate whether standard internet access for the program is Allowed (green), Blocked (red) or n/a (pink).

Underneath the list are the following buttons.

• Allow – If a program has been Blocked from standard internet access then this button will be enabled and will Allow standard internet access for the program.
• Block – Sets Online Armor to Block the program from standard internet access.
• Add – Allows you to manually add a program to the list. Manually added programs are Allowed standard internet access by default.
• Delete – Removes the program from the Programs list. Deleting the item from the list will cause Online Armor to pop up again if the program tries to access the internet again in the future.

Programs List Context Menu

You can right-click any program in the Programs list to access additional options including:

• Find – Allows you to perform a search in the Programs list to find a particular program.
• Delete all – Removes all programs from the Programs list.
• Go to ports – Takes you to the Ports list, automatically highlighting the selected item.
• Export – Allows you to save the Firewall settings, which can be imported again later if Online Armor is reinstalled, to save the time of answering pop-ups or changing settings again.
• Import – Allows you to import previously exported Firewall settings.

Ports

The rules in the Ports list determine how a program is allowed to connect to the internet.

The Ports list is organized using a table with the following columns:

• Program – Shows the filename of the program on your hard drive.
• Prot – (Short for Protocol.) Shows the protocol for that individual rule. If the program uses another protocol then another rule will be created.
• Dir – (Short for Direction.) Shows whether the rule allows incoming or outgoing connections.
• Ports – Shows which port(s) the rule allows the program to use.
• Adv – Indicates whether Advanced options are set in this rule. (Advanced mode only.)

Each row is color coded to indicate whether the rule allows (green) or denies (red) the type of connections specified in the rule.

Underneath the list are the following buttons:

• New – Allows you to manually create a new rule to add to the list.
• Delete – Removes the selected rule.
• Edit – Allows you to make changes to the selected rule in the list.

Ports List Context Menu

You can right-click any rule in the list to access additional options including:

• Copy – Creates a duplicate of the selected rule and opens the rule editor. This is useful if you need to create a rule that is similar to one that is already made.
• Find – Allows you to perform a search in the Rules list to find a particular rule.
• Delete all – Removes all rules in the list.
• Export – Allows you to save the Firewall settings, which can be imported again later if Online Armor is reinstalled, to save the time of answering pop-ups or changing settings again.
• Import – Allows you to import previously exported Firewall settings.

Interfaces

The Interfaces list shows you all network adapters installed in your computer that Online Armor is currently firewalling.

The Interfaces list is organized using a table with the following columns:

• Active – Indicates whether the network interface is active (connected).
• Trusted – When this option is selected, any computer in your local network (other computers that share the same internet connection) will be able to connect to your computer, usually to access shared files or printers, without restriction.
• Address, Mask – Shows the network address (IP address) and the Subnet Mask that the network adapter is currently using.
• Desc – Shows the description of the network adapter provided by the network adapter’s driver.

The columns in the Interfaces list are also color coded for convenience. The "Trusted" and "Description" columns show whether the interface is either using default trust settings that were originally applied when the network was first detected (yellow), has been manually Trusted (green), or has been manually Not Trusted (red). The "Active" and "Address, Mask" columns indicate whether the interface is Active (green) or disabled/not applicable (grey).

Computers List

The Computers list shows other computers in your local network that Online Armor can see. This list allows you to control what computers in your network may connect to your computer, usually to access shared files or printers across the network.

Computers may be classified in the following ways:

• Trusted – The computer can connect to your computer without any restrictions (Restricted Ports will not be in place).
• Unknown – If the computer connects to your computer through a Trusted network interface then the connection will be allowed and rules created. If it connects to your computer through a network interface that is Not Trusted then the connection will be denied. (Restricted Ports will only be in place for Unknown computers if the network interface is Not-Trusted).
• Not Trusted – The computer cannot connect to your computer under any circumstances (Restricted Ports will be in place).

The Computers list is organized using a table with the following columns:

• Computer – The network address (IP address), hardware (MAC) address, and possibly the computer name of the other computer seen on the network.
• Status – Indicates whether the computer is Trusted, Unknown, or Not Trusted.
• (Unlabeled) – The last column, which is not labeled, shows a light bulb if the computer has been located and is turned on.

Underneath the list are two options:

• Hide inactive networks – Hides any networks that Online Armor has seen but that your computer is not currently connected to.
• Reset list – Re-establishes the list of computers on the network, clearing any computers from the list that are not currently on the network.

Computers List Context Menu

You can right-click any computer in the Computers list to access options including:

• Trust – Sets the selected computer to Trusted.
• Untrust – Sets the selected computer to Unknown.
• Distrust – Sets the selected computer to Not Trusted.

Restrictions Tab (Advanced Mode only)

The Restrictions tab allows you to restrict connections by IP address/range and by Country.

The Restrictions tab contains two panes. The left pane allows you to configure IP address/range restrictions, and the right tab allows you to configure restrictions by country.

At the top of each pane are two options that allow you to change whether the settings you configure will be Allowed or Denied.

• With the option set to Allowed, your computer will be able to connect to any IP address/range and country except for the ones you specify.
• With the option set to Denied, your computer will only be able to connect to the specified IP addresses/ranges and/or countries.

To add an IP restriction click "Add" and enter the starting and ending IP addresses in the range you wish to Allow or Block. For example, entering 10.10.10.0 to 10.10.10.255 will block every address starting with 10.10.10.xxx. Once you enter the starting and ending addresses of the range, the IP Address and Mask fields will be automatically filled in.

To add a country restriction, simply click Add and select the country you wish to Allow or Block.

Once you have added restrictions, you can right-click on any entry in the list and Import or Export settings files.

Blacklists Tab (Advanced Mode only)

Online Armor supports the import of Blacklists in the "Bluetack" format. Online Armor will block any connections to or from the IP addresses on the Blacklist(s).

You may add multiple blacklists and give them a name for easy identification. Selecting the "Default (All Rules)" option configures Online Armor to apply the blacklist to all rules automatically. In the Advanced mode rule editor you may override these settings on a per-rule basis.

You can Import and Export your blacklists by right-clicking any entry in the Blacklists.

You can also manually Add, Delete, or Edit individual entries in each blacklist with the corresponding buttons below.

ICMP Tab (Advanced Mode only)

The ICMP tab allows you to configure Online Armor to Allow, Deny, and Log the ICMP messages that you wish.

By default all ICMP messages are logged and Echo Request, Timestamp Request, Information Request, and Address Mask Request are allowed.

The list is color coded to show when each ICMP message is Allowed (green) or Denied (yellow).

Clicking "Restore defaults" will undo any changes made to the default settings.

Restricted Ports Tab (Advanced Mode only)

The Restricted Ports list allows you to restrict ports used for internet connections, regardless of the Trusted status of any individual program. These ports will also be restricted for local connections if the interface for the LAN is Not Trusted or for individual LAN computers based on their status in the Computers list.

You can manually Add ports to be restricted, Edit existing port restrictions, or Delete port restrictions. You can also temporarily disable restrictions by removing the check from the box in the "Restricted" column.

The Restricted Ports list is color coded to indicate when a restriction is one of the defaults (green), or when a restriction has been added or edited (yellow).

Clicking "Restore defaults" will remove any restrictions that have been added and undo any changes made to the default restrictions.