计算机上的防火墙是否仅阻止来自计算机外部或计算机上进程的内容？
计算机上运行的防火墙是否仅阻止来自该计算机外部的内容，或者它们是否阻止通过端口进行通信的计算机上的进程之间的通信？
具体来说，我正在编写一个 Windows 服务，它将为计算机上的其他进程公开 http RESTful 服务。该服务将在非- 动态/专用范围内的标准端口 - 即不是端口 80 或类似端口。我是否需要担心计算机上可能运行的任何防火墙？
这只会部署到 Windows 机器 - 但我想这是一个普遍问题。
（之前在 SF 但也许这更多是一个以开发为中心的问题）
Does a firewall running on a machine only block stuff from outside that machine, or do they block communication between processes on a machine communicating via ports?
Specifically, I'm writing a windows service which will expose an http RESTful service for other processes on the machine. The service will be running on a non-standard port in the dynamic/private range - ie not port 80 or similar. Do I need to worry about any firewall that might be running on the machine?
This will be deployed only to windows machines - but I guess it's a general question.
(Asked earlier on SF but perhaps this is more of a dev-focused question)
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
防火墙通常根据协议（tcp、udp、http 等）、端口和/或 IP 阻止网络调用。因此，如果您有一个本地进程对您的环回地址 (127.0.0.1) 进行 tcp/ip 调用，那么防火墙可能会影响本地进程。
为了更具体地回答您的问题，大多数防火墙程序应配置为仅允许特定地址和端口并阻止其他所有内容。所以我认为你应该在设计中考虑这一点。
Firewalls usually block network calls based on protocol(tcp, udp, http, etc), port, and/or ip. So if you have a local process making a tcp/ip call to your loopback address (127.0.0.1) then yes the firewall could be affecting the local process.
To be more specific to your question, most firewall programs should be configured to only allow specific address and ports and block everything else. So I would think you should consider this in your design.
这取决于防火墙，但现在监视（和干预）进出进程已经很常见。
是的，您应该针对端口（UDP 和 TCP）上的任何活动被监控并可能根据设置被阻止的可能性做好计划。
It depends on the firewall, but it's now very common to monitor (and intervene) processes in and out going.
Yes, you should plan for the likelihood that any activity over ports (UDP and TCP) is being monitor and potentially blocked depending on settings.
我认为它也会影响本地进程。
有一天，我尝试运行一个进程，防火墙提示我是否允许尝试访问端口的进程。
所以你需要照顾它。
I think it affects the local process too.
As somedays back i tries running a process and the firewal prompted me whther to allow the process which is trying to access the port.
So you need to take care of it.