Internet Shortcuts Files Blocked

[MightierPen]

I have my file manager windows app blocked from network activity.

But using that file manager I have some url shortcut files, as bookmarks to those websites.

If my windows default web browser is not currently running then clicking the file will launch the browser but Kaspersky blocks it.
Even though the browser is network allowed.
If I run my browser first then copy over the url into the box it isn't blocked.
This happens with any kind of file where I want the program not to connect to the internet but if it runs a file that I want to connect it won't.

How can I allow url shortcuts to pass but keep the file manager blocked?
Same with updating software.  I wish that for my apps I can "Check For Updates" and Kaspersky will allow it, but that's the only thing it will allow.

[harlan4096]

Welcome to Kaspersky Community.

 

Did You apply the network blocking to both explorer.exe if You are in W11?

 

 

Also, I guess the problem here is how Windows works, where are located the URL shortcut files?

 

Given that the moment you double-click on a URL shortcut to open it, you are already using Explorer.exe, K. will apply the blocking rule 🤷‍♂️

[AlexeyK]

@MightierPen The description is not very clear, but I'll try to guess. If network access for the file manager is blocked and the shortcut is launched from it, then the browser inherits the restrictions from the program that launched it. In this case, it's the file manager. So network access will be blocked. If you first open the browser via Explorer, and then your site via the shortcut, there is no inheritance, because the parent process of the browser is Explorer and network access will be allowed.

13 часов назад, MightierPen сказал:

Same with updating software.  I wish that for my apps I can "Check For Updates" and Kaspersky will allow it, but that's the only thing it will allow.

If you know the addresses where the app checks and downloads updates, you can configure permissions for these addresses. But this can lead to errors and is technically difficult, or even unreal in some cases.

Edited 3 hours ago by AlexeyK

[MightierPen]

2 hours ago, harlan4096 said:

Did You apply the network blocking to both explorer.exe if You are in W11?

Given that the moment you double-click on a URL shortcut to open it, you are already using Explorer.exe, K. will apply the blocking rule 🤷‍♂️

It's windows 10, with brave.
Brave has no restrictions, just the file manager.  So I'm asking if there is any file type exception rules somewhere?  To not allow any network traffic from the file manager, except for .url files.  And preferrably only if executed by the current user, not by the system or trusted installer or any other user.

If I first open brave then use the file manager to run a shortcut file it works fine.  But if it's inheriting the file manager restriction, even though brave is running it should be blocked.  Something isn't right about that.

40 minutes ago, AlexeyK said:

If network access for the file manager is blocked and the shortcut is launched from it, then the browser inherits the restrictions from the program that launched it. In this case, it's the file manager. So network access will be blocked.

Yes, so I'm asking for an allowance of .url file types only from the file manager, to not inherit the restrictions for that file type only.  ?

41 minutes ago, AlexeyK said:

If you know the addresses where the app checks and downloads updates, you can configure permissions for these addresses. But this can lead to errors and is technically difficult, or even unreal in some cases.

That's not a bad idea.  I could watch wireshark when updating an app then copy over those credentials.  But doing that for all my apps, it's probably less work to just manually allow them every update time.

I wouldn't have to do this if Kaspersky would just block apps when I'm not using them and auto allow them when I am.  Why does no one do this?  It's seems like basic common sense.  To not let apps run roughshod over my computer in the background, when I'm not using them at the time. 

[AlexeyK]

2 часа назад, MightierPen сказал:

I'm asking for an allowance of .url file types only from the file manager, to not inherit the restrictions for that file type only.  ?

I have to repeat: the scenario is not very clear to me. But as I understand it, this cannot be done. 

2 часа назад, MightierPen сказал:

But if it's inheriting the file manager restriction, even though brave is running it should be blocked.  Something isn't right about that.

It shouldn't, because the file manager is not the parent process in this case, as far as I understood from all your descriptions.

Actually, it seems to me that you are trying to "overdo" the settings, there may be some problems after this.