User Guide - Kaspersky Lab

150 Kaspersky Internet Security 7.0
1. The default action of every new rule is allow. To change it to a block
rule, left-click on the Allow link in the rule description section. It will
change to Block.
Kaspersky Internet Security will still scan network traffic for programs
and packets for which an allow rule as been created. This could result
in data being transmitted more slowly.
2. If you did not select an application prior to creating the rule, you will
need to do so by clicking select application. Left-click on the link and, in
the standard file selection window that opens, select the executable file
of the application for which you are creating the rule.
3. Determine the direction of the network connection for the rule. The
default value is a rule for a bi-directional (both inbound and outbound)
network connection. To change the direction, left-click on incoming and
outgoing and select the direction of the network connection in the
window that opens:
Inbound stream. The rule is applied to network connections opened
by a remote computer.
Inbound packet. The rule applies to data packets received by your
computer, except for TCP-packets.
Inbound and outbound streams. The rule is applied to inbound
and outbound traffic regardless of which computer, the local one or
the remote one, initiated the network connection.
Outbound stream. The rule is only applied to network connections
opened by your computer.
Outbound packet. The rule is applied for inbound data packets that
your computer sends, except for TCP-packets.
If it is important for you to specifically set the direction of packets in the
rule. Select whether they are inbound or outbound packets. If you want
to create a rule for streaming data, select stream: inbound, outbound, or
both.
The difference between stream direction and packet direction is that
when you create a rule for a stream, you define the direction of the
connection. The direction of packets when transferring data on this
connection is not taken into consideration.
For example, if you configure a rule for data exchange with an FTP
server that is running in passive mode, you must allow an outbound
stream. To exchange data with an FTP server in active mode, you must
allow both outbound and inbound streams.