Dustin Cook wrote:


>>> I wouldn't outright say a waste of resources, you can use one to keep
>>> some applications from calling home.. for whatever reason.
>> You'd wish.
>
> Unless the application is designed to evade whatever firewall a person
> might be using, that's usually how it goes.


If the application isn't malicious, then you don't need to enforce that it
does what exactly it does. On the contrary, if you think that it does
something that it shouldn't do, then you're already considering it as malicious.

> If you know something I don't,
> feel free to share it, we can all learn.


Hm... what about applications seeming non-malicious? A well-known example is
commercial software from Adobe, whereas the Adobe License Manager Service
uses the Raw Sockets API to successfully bypass about any typical "personal
firewall".