Adding or /Enable/Disable a rule by command line

[Helge Lange 0]

My son loves Fortnite a bit too much and now with school at home where he needs access to his computer he plays while in class. Atm. I placed a firewall rule and Fortnite can't connect. But I don't want to go all the time to his PC and enable/disable the rule. So I wrote a small windows service (that also can control when he can login, how long he can use the PC and stuff) and want to add now, that I remotely (from my cellphone for ex.) I can give him permission to play Fortnite a certain amount of time. So the rule should deactivated by command line from my service and after that time activated again.

With the windows firewall I can achieve that with the "netsh advfirewall firewall" commands, but in ESET ?

Any ideas ? it it possible or do I have to uninstall ESET and use the windows firewall?
I tried it locally an my dev-pc and adding the rule in windows firewall work, but ESET does ignore it. The test program still connects on TCP and UDP

 

thanks in adv.

[Marcos 5,070]

Consumer ESET products cannot be controlled from the command line, only business products can (solution for RMM systems).

Currently we don't provide application control on Windows which would enable you to define times when an application can be launched or when it can access the Internet. This is currently possible on Android only.

[Helge Lange 0]

Goodbye, dear Eset firewall after so many years of service...

[Marcos 5,070]

I don't think it's unique to ESET that protection cannot be disabled easily from the command line. Otherwise malware or attackers could eaisily disable protection or add fw rules prior to performing malicious actions.

[Helge Lange 0]

you'd still need admin rights. also with windows firewall.

Maybe I have to think about it another way, like prohibiting the exe file to start.

[peteyt 393]

13 minutes ago, Helge Lange said:

you'd still need admin rights. also with windows firewall.

Maybe I have to think about it another way, like prohibiting the exe file to start.

There also might be a free parental control program that could achieve what you wanted 

[itman 1,659]

Adding and deleting Win firewall rules "on the fly" is not the way to accomplish this.

Use of netsh advfirewall firewall via remote execution method should be restricted. If you can do it, so can an attacker.