avast! + TinyWall = ignoring windows firewall rules

Avast Free Antivirus / Premium Security
1

Theres this awesome little firewall called TinyWall

It’s not really a firewall, it a GUI for windows firewall. Easier to make rules for it, easier to turn on/off, all the general manipulation while less issues when theres not really its own core.
But theres a problem with avast!

Avast! with web shield enabled redirects some programs through itself to go on the internet, ignoring windows firewall rules.
Would it be hard for avast! to check with windows firewall ruleset before letting something in to the wild through itself?

Example how I found out about this(I somehow missed avast! being mentioned in the faq for tinywall)

So basic rule of tinywall is that everything is blocked except system stuff thats need it. Then you add your own applications whitelist that are allowed to go online and avast! is of course amongst them.
So the behavior is pretty predictable and you know everything new should act like theres no internet.
I run gpuz, software that gives info about your graphic card, and it tells me theres a new version available, I am like wtf, how does it know?
And to my surprise I find out that with web shield enabled avast! let gpuz slip through the windows firewall rules.

I dont think that it should be doing that. So maybe some checking windows firewall rules before letting programs go through web shield?

cheers

2

this is because AvastSvc.exe works and behaves like a proxy and all connections go through avast! Web Shield. It has been reported that some firewall, one of them Windows firewall, can not be set to control outgoing connections. You still can set rules for incoming traffic but not outgoing.

Comodo firewall was also affected by this. Some old and not supported TDI interface driver that was retired by avast!. Here is what Lukor had to say about it:
http://forum.avast.com/index.php?topic=93953.msg759534#msg759534

3

In Web Shield settings you should enable - scan traffic from well-known browser processes only.
Then TinyWall should work.

4

Awesome, would be nice to have control over these well known processes, but nice that theres at least this way.

thnx