Welcome, Guest. Please login or register.
November 07, 2009, 05:25:57 PM

Login with username, password and session length

333163 Posts
36821 Topics
83461 Members

Latest Member: puper76

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Help - CIS
| | | |-+  Defense+ Help
| | | | |-+  Default Deny timed out?
« previous next »
Pages: [1] Go Down Print
Author Topic: Default Deny timed out?  (Read 378 times)
Sandwater
Comodo Family Member
***
Offline Offline

Posts: 94


« on: July 08, 2009, 11:03:51 PM »

I've been wondering for some time:  what happens if I miss a D+ notice.    Does it deny the action or give up and allow it.

After convincing a friend to use Comodo on her new HP netbook,  win xp, default Comodo settings,  I noticed  the mouse pad freezing up with D+ alert wanting to know if I should allow the pgm that controls the mousepad.  

Well,  all I had to do was wait till the notice went away.  Then, thankfully,  I got the mousepad back.

While I'm sure I can configure the mousepad permission's to not have this trouble in the future,  I'm pretty troubled by the fact that deny becomes allow after a short period of time.   What if it was a problem exe?

On my Win7 machine alot of notices come up while my back is turned, so I'm sure I miss some too,   I now  have to assume that whatever I miss is default allow.   Not too worried about this Win7 machine,  the notices I've seen are alway's about pgms I use,  plus I don't use it for anything too important.

I know Win7 isn't fully supported,  but the little HP dual core 1 gig XP netbook machine is.  

So maybe I got the answer to my question,   default deny is timed out and then allowed?

Do I have something wrong?  Hope so.  
« Last Edit: July 09, 2009, 04:25:05 PM by Sandwater » Logged
kail
Autonomous
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5320


I'm not a complete idiot, some bits are missing.


« Reply #1 on: July 08, 2009, 11:39:02 PM »

An unanswered alert will always result in CIS blocking whatever it was, unless.. the system/whatever beats CIS to it with its own time-out (if it has one).

The mouse? Well, it probably asked for something that it didn't mind not getting in end, which is why it continued after it was eventually denied (a guess, of course).
Logged

Vista Business x32+SP2 with CIS 3.12 & Firefox 3.5 & Becky! 2.52
__
A positive and polite attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
Sandwater
Comodo Family Member
***
Offline Offline

Posts: 94


« Reply #2 on: July 09, 2009, 04:49:26 PM »

An unanswered alert will always result in CIS blocking whatever it was, unless.. the system/whatever beats CIS to it with its own time-out (if it has one).

That would be the same result then?  If the system shut down a request before the CIS alert was answered or timed out,  then the "issue"  would not have any changed permissions  and we'd likely run into it sometime again later on.

And on the mouse,  probably a few different exe's are needed for it, different functions,  I bet there is a not often used feature of the mousepad that is currently denied by CIS,  and it will show up again.

lol,  the hard part is giving it permission with the mousepad froze.  The keyboard only worked on the window that was open behind the alert.    So it's a good thing the time out exists.

Right on,   I feel better,  still believe I'm denying by default.  Thanks for the feedback.
Logged
kail
Autonomous
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5320


I'm not a complete idiot, some bits are missing.


« Reply #3 on: July 09, 2009, 05:10:50 PM »

That would be the same result then?  If the system shut down a request before the CIS alert was answered or timed out,  then the "issue"  would not have any changed permissions  and we'd likely run into it sometime again later on.
Yes, a default deny/block will not be remembered, although it will be logged. I suspect that it is very likely that you will encounter it again. If, so.. and you're unsure, take a screen shot, post here & somebody will probably be able to give you solid advice on how to answer it.

And on the mouse,  probably a few different exe's are needed for it, different functions,  I bet there is a not often used feature of the mousepad that is currently denied by CIS,  and it will show up again.

lol,  the hard part is giving it permission with the mousepad froze.  The keyboard only worked on the window that was open behind the alert.    So it's a good thing the time out exists.
OK, once a default/deny is issued, whilst it is not remembered by CIS in the long term, it is remembered and deployed for the remainder of CIS' processes/drivers lifetime. ie. Reboot to clear it time.

Assuming you're happy with whatever is trying to happen is safe, there is a relatively painless way out.. stick Defense+ into Training Mode. Then do what provokes CIS's blocking behavior and if that means rebooting, do so. Once done, return Defense+ to its normal Mode and reboot for the final time. This usually is able to teach Defense+ everything it needs to know & resolve any issues. Actually Training Mode is very useful at introducing safe applications and games to CIS. Smiley
Logged

Vista Business x32+SP2 with CIS 3.12 & Firefox 3.5 & Becky! 2.52
__
A positive and polite attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
Sandwater
Comodo Family Member
***
Offline Offline

Posts: 94


« Reply #4 on: July 10, 2009, 12:24:00 AM »

Thanks kail.  Your input helped alot,  I've rebent my mind to see the concepts correctly. 
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 1 seconds with 22 queries.
Powered by SMF 1.1.10 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com