How do I Lock Down (airgap)

Topic

New Reply

I do not plan on doing any Internet on this computer except for Discord and Minecraft.  Any Programs can be sneakernet to it. I do not need any updates to it as  I just want it to work for games, no browsing the Internet.

How do I lock out the world but for the two?

Reply | Quote

Replies

Make an image backup first in case you want to revert / make a mess.

Use the Windows firewall to block all outgoing processes except for your games.
https://www.ghacks.net/2016/05/02/block-all-outbound-traffic-in-windows-firewall/#:~:text=Select%20Windows%20Firewall%20Properties%20on,enable%20logging%20for%20successful%20connections.

cheers, Paul

Reply | Quote

What about inbound ? Should block that as well.

Reply | Quote

Windows firewall blocks incoming, as does your router.

cheers, Paul

Reply | Quote

Connected = not airgapped.

I would call leaving internet connected, machine unpatched, relying on windows firewall as foolish.

To me air gap means no internet no exceptions.  Can’t have both at the same time.

Fwiw air gap even in faraday cage is no longer safe it’s been breached through heat signature.  Nothing electronic is safe, but you can use the best safe practices like updating to give yourself a chance.

 

Much of the risk depends on your adversary.

Reply | Quote

Quote

Connected = not airgapped.

I would call leaving internet connected, machine unpatched, relying on windows firewall as foolish.

To me air gap means no internet no exceptions. Can’t have both at the same time.

Fwiw air gap even in faraday cage is no longer safe it’s been breached through heat signature. Nothing electronic is safe, but you can use the best safe practices like updating to give yourself a chance.

Much of the risk depends on your adversary.

UnQuote

Quote

I do not plan on doing any Internet on this computer except for Discord and Minecraft

Unquote

Your advise Would be good for general prepose. But that is not the case here. Why do I need updates thaat might break my GAMING computer ( as in used for gaming only ).

No browsing of any kind. Prevent ms from any kind of spying. Prevent ms from sending unwanted “Apps” like Edge ( a unneeded browser ) any web searching. The internet is only to talk to minecraft servers and let other gamer know I am ready to continue working on that minecraft project No other internet!

By the way ms firewall might indeed be a joke. I am using COMODO as a firewall with Defence + to pick and choice which programs get to run (HIPS, Host Intrusion Prevention System). Also this reply is on my general purpose computer, A windows 7. No banking, just general browsing and dl for the gaming system.

Reply | Quote