Files
orca/src/shared/windows-mobile-firewall.ts
T
OrcaWin 9e2c63ec7c fix(mobile): detect and repair overriding Windows Firewall Block rules for pairing (#8846)
* fix(mobile): detect and repair overriding Windows Firewall Block rules for pairing

Firewall inspection now reports an overriding inbound Block rule as
blocked instead of false success, the UAC repair removes only
conflicting rules for the current Orca executable, TCP pairing port,
and Private profile before recreating the scoped allow rule, and the
notice re-inspects Windows policy after repair instead of optimistically
reporting success. Stale focus-triggered inspections can no longer
overwrite a newer result during UAC elevation.

Fixes #8371

* fix(mobile): inspect the ActiveStore so GPO firewall rules are visible

Without -PolicyStore ActiveStore the NetSecurity queries read only the
local persistent store, so a GPO-applied Block rule was invisible and
the post-repair re-inspection could report a false success on managed
hosts.
2026-07-15 01:40:41 -07:00

18 lines
516 B
TypeScript

export type WindowsNetworkCategory = 'private' | 'public' | 'domain' | 'unknown'
export type WindowsMobileFirewallStatus =
| { supported: false }
| {
supported: true
port: number
ruleAllowed: boolean
blockingRuleDetected: boolean
privateFirewallEnabled: boolean
networkCategory: WindowsNetworkCategory
inspectionAvailable: boolean
}
export type WindowsMobileFirewallRepairResult =
| { ok: true }
| { ok: false; reason: 'cancelled' | 'failed' | 'unsupported' }