Windows Defender Firewall does not work with WSL2

[PeterTucker]

Windows Version

Microsoft Windows [Version 10.0.19044.5131]

WSL Version

2.3.26.0

Are you using WSL 1 or WSL 2?

• WSL 2
• WSL 1

Kernel Version

5.15.167.4-1

Distro Version

Ubuntu 24.04

Other Software

No response

Repro Steps

I tried to block outgoing traffic with Windows Defender for %SystemRoot%\System32\bash.exe and %SystemRoot%\System32\wsl.exe.

Unfortunately, it did not work. Tried pinging a local device 192.168.1.XXX, but it still sent/received packets.

Expected Behavior

WSL should have it's packet's blocked when pinging another device on my network.

Actual Behavior

It can ping other devices.

Diagnostic Logs

No response

[github-actions]

Logs are required for review from WSL team

If this a feature request, please reply with '/feature'. If this is a question, reply with '/question'.
Otherwise please attach logs by following the instructions below, your issue will not be reviewed unless they are added. These logs will help us understand what is going on in your machine.

How to collect WSL logs

Download and execute collect-wsl-logs.ps1 in an administrative powershell prompt:

Invoke-WebRequest -UseBasicParsing "https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1" -OutFile collect-wsl-logs.ps1
Set-ExecutionPolicy Bypass -Scope Process -Force
.\collect-wsl-logs.ps1

The script will output the path of the log file once done.

If this is a networking issue, please use collect-networking-logs.ps1, following the instructions here

Once completed please upload the output files to this Github issue.

Click here for more info on logging
If you choose to email these logs instead of attaching to the bug, please send them to [email protected] with the number of the github issue in the subject, and in the message a link to your comment in the github issue and reply with '/emailed-logs'.

View similar issues

Please view the issues below to see if they solve your problem, and if the issue describes your problem please consider closing this one and thumbs upping the other issue to help us prioritize it!

Open similar issues:

• No network communication between WSL2 and host / internet (#11991), similarity score: 0.72

Closed similar issues:

• Cannot filter outgoing flows with Windows Defender Firewall (#6936), similarity score: 0.80
• WSL2 Is bypassing windows firewall rules. (#10569), similarity score: 0.77
• xdebug from WSL2 to Windows blocked by Windows Defender (#11139), similarity score: 0.74
• IP protocol traffic not registering on WSL2 network interface (#6831), similarity score: 0.72

Note: You can give me feedback by thumbs upping or thumbs downing this comment.

[PeterTucker]

/question

[github-actions]

Diagnostic information

Found '/question', adding tag 'question'

[OneBlue]

@PeterTucker: The network traffic doesn't actually come from wsl.exe when packets are sent out of WSL.

If you want to do something like that, the best way would be to use Hyper-V firewall