I noticed that LS creates automatically new rules for DNS UDP responses and automatically approves them. I have set a rule to allow outgoing connections for DNS requests, so these pass through just fine as expected. However I noticed that I get many automatically generated and accepted rules for the DNS responses, i.e. incoming connections (from the DNS servers to my machine). I know that UDP is stateless. Does what I see mean that LS somehow ecognizes that the incoming connection is response to a connection initiated from my machine? If so (like with TCP connections), why LS (unlike the TCP) creates temporary rules for the responses? And more importantly why it doesn't show alerts and accepts them automatically? Note that "Confirm connection alert automatically" is disabled.
↧