I read the thread here you are not willing to take care of it either because I have exactly the same problem as the thread creator.
Doesn't seem you read it entirely, because if you had, you would have know it's NOT something that has anything to do with our coding, it's the standard, universally accepted method of uncompressing an installer into a different temporary folder with a random name, using by most installation routines. It's INSIDE the installer itself, there's nothing we coded to achieve that!
Not only that, your comment about our supposed "unwillingness" of changing this, clashes with the fact I even posted my question to the Inno Setup support group, asking if it was possible to change this behavior. Of course, this has been objected as something rather bizarre, since each and every installer does that, and nobody ever questioned this so, even if we might be "willing" to do that, it's just not possible with the (completely standard and used by thousands) installer routine we use, that is Inno Setup.
It's very annoying and the only program I have this problem with.
Since it's fairly common practice for all installer, it must be something specific with your firewall, otherwise we would have the forum flooded with similar requests, instead of exactly 1 thread with exactly 3 people included you that posted it.
The only solution is to disable the firewall every time I want to start the installer or live update
I think the main problem here is using the *folder* as a discriminating factor to create a rule. Are you SURE your firewall is not allowing you to create a rule based on the filename instead, no matter where it's located ? If you could just make a rule for couatl_updater.tmp that would be trigger no matter that file really is, the ever changing folder won't be an issue anymore.