Windows Firewall - Block all incoming connections - Breaks IPv6

Last Modified: Fri, 17 Jul 2026 18:19:58 +0000 ; Created: Wed, 14 Jun 2017 03:24:59 +0000

Customize settings for Windows Firewall with Block all incoming connections, including those in the list of allowed apps. Also known as blockinboundalways.

A bug in Microsoft Windows 7 & 10 & 11 as the stateful firewall does not keep track of necessary IPv6 traffic with its neighbors.

Using IPv4 only (disable IPv6) or disabling the OS firewall traffic works as expected. An alternative is to curtail the inbound firewall list (installing apps can add to this over time) or use GPO for firewall rules.