dsccommunity / dsccommunity/NetworkingDsc
xFirewall doesn't fix issue of Configuration Drift if rule that drifted is not defined in configuration
Open
Nobody has claimed this yet.
enhancement
help wanted
- Dominant language
- PowerShell
- Stars
- 235
- Forks
- 93
- PR merge metrics
- No merged PRs in 30d
Description
xFirewall still reports as compliant even if someone adds extra rules to the windows firewall outside of the DSC configuration.. Haven't found anywhere with a solution to this. Realistically all firewall rules on my server should be either 1. Default windows rules or 2. added through DSC
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the xFirewall resource and its compliance logic, then reproduce the case where an extra Windows Firewall rule exists outside the DSC configuration. Done means the resource detects and reports noncompliance for unmanaged rules while preserving the stated allowance for default Windows rules.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- infrastructure, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100