Comodo Firewall Wishlist v5[Closed]

[Guest]

[ShiftingGhost]

Thank you Comodo for a great Firewall. Since I got into it, I have no idea how I lived without :)

Anyhow, since this is a Wishlist :), I wish for (as long as they don't require more system-resources):
- more Details! Sometimes my Browser stops working becuause of the Component Monitor. The Details doesn't help me much because the name ist a row of little boxes... So a Path would be great :)
- the option to remove a specified program from the Connection-Window. Or the option to reduce the details to one row (maybe total in/out but not every connection). Or an option "last-in-list", so you can see the other connections first. Or maybe a tree-view or something like that. This is as soon I run a program with many connection, you have to search for the others. The Box on the Summary-Page doesn't really help, because there you can't see the details...
- an option to close a specified connection
- more options to resize (eg the details), sort (logs, application and component monitors), export (eg the IP from the details to the clipboard) and define (custom proxy for update-program, zones with more than one ip-range)
- a simple and quick way to block a programm (i imagine a checkbox 'disable <app>'. Checked: any connections to/from <app> are blocked. Unchecked: <app> may connect acording the the rules for <app>). Or maybe rule-sets. Like a set for <app1>, one for <tool4> and one for all (to switch entire rule-set, should be very usefull for laptops, who need to work in different networks).
- support of different network-adapters (like using wireless and wired networks at the same time, some rules for wireless adapter and others for the wired one. Maybe even rules for both).
- a second, optional, Log-Window (just an addition, the existing should work like before). I thought of something like that in kerio personal firewall 2.1.5 (not the annoying thing in the later versions), something you can just igonre (and it won't pop up, even if there are new entries) and which just logs the events of specified application-rules. So you can choose ok, not now, and the window is closed just like it has never been there. Or you can check the entries of this window...

These are the things I had on my mind... Does anybody besides me like to have such things?

[EDIT:]
Ups, should have looked into previosu wishlists more carefully. Sorry for that!

[delakota]

Thank you everybody at Comodo for a great firewall - I am looking forward to your antivirus when it emerges from beta.

Having been a user of Kerio 2.15 and Outpost (2.7 was last version I used), I really miss the absence of a mode setting. In Outpost you could select from an icon in the tray and kerio had a slider. It meant I could set the firewall to block any connection which did not have a rule explicitly created for it, in addition to a learning mode,stop all and allow all modes. I did look quickly down the wishlist but did not notice it so apologies if somebody has suggested this already!

I think Kerio and Outpost did a lot of things right with their respective software in terms of the interface and features and you can gain an idea of what makes a good firewall which is user friendly. Creating the rules in Outpost was easy and straight forward and you still learnt something as was kerio, if a little harder. I don't want a clone of these firewalls - just take their good bits and learn from them.

Thanks - a mode feature would be make me very happy for now 

[Kamigatta]

Id seriously like comodo to add a temporary block/allow section or if its easier maybe just put the application/component in ask mode so everytime the application/component is runned, you can either click allow or deny again(if you want it permanent then check the remember this option box)

I asked for this because many times when i am downloading an unresumable file, and i accidentally deny a program(without checking the remember option)so what ever applications related to it wont work and i have to freaking restart my PC to get it to ask again. It is extremely annoying.. Or maybe i am missing something? I have searched all over and have not found a solution that does not require a restart.

[Little Mac]

I'm now thinking I'd like to see popups for Outgoing connection attempts as relates to the Network Monitor (connection attempts that are slated to be denied).  Currently NetMon does not generate popups.  This would help in creating a tightened set of rules, where application control is limited, and something may be interfering in the NetMon area; or for diagnosing problems.

Or maybe an option to show/hide those NetMon popup alerts.

LM

[Ledgem]

Hey everyone, I just switched to Comodo today after receiving numerous recommendations for it. I'm an ex-Kerio user.

Comodo works wonderfully thus far, and I have to congratulate the team for putting it together. I've sorted through all dialogues that I could see, and I just can't find this feature: an ability to filter packets based on port and IP address/range (also, ability to choose whether it's TCP or UDP, or both; and inbound connections, outbound connections, or both).

For example, in my case, I use Windows Remote Desktop. It's a huge security risk, in many ways; with Kerio, I used a rule to block all access to the port, EXCEPT for specified port ranges (those being the ranges that I'd be accessing remotely from).

I know that many people switch and immediately expect/want things to be the way they were; if Comodo already has capabilities to do this, I'll happily learn it. If someone knows how, please message me with some brief instructions - I can probably figure the rest out.

edit: Much thanks to Little Mac for pointing me toward a thread that helped me find that Comodo can, in fact, do this (and some of the settings seem even more comprehensive than they wee under Kerio). Nice work.

I think someone did request it, but if it'd be possible to put a comment for the rules, that'd be nice. Also, it'd be nice if a single rule could accommodate a few settings (such as multiple IP ranges); multiple rules could be employed to achieve the same effect, but it's all in line with keeping things organized. Lastly, perhaps the ability to set "IP groups" - basically, the program stores IP information, and then for rules you could call up an IP group. Again, you could just redo the IP ranges over multiple rules to achieve the same effect; so those aspects are more a matter of convenience.

[genome692002]

I wish Comodo would Have MAC Address based rule... We are on a Network where the assigned IP address is dynamic assigned by Our ISP to our LAN and sometimes other computers would turn them selves off.. and reassigned a new IP address on restart and comodo would Block this other computers simply cause the IP Address has changed.. and we have to change the rules all the time.. Its so frustrating...

however MAC adresses dont change as they are specific to NIC Card and unique.. so if comodo would support creating rules based on MAC Address... Like those of Jetico Personal Firewall and Sygate Personal Firewall...

this would really be even greater true complete Firewall...

regards.. and more power... thanks...

[Chaos18]

For Comodo 3.0 to have a feature called NIPS?

[oomingmak]

For Comodo 3.0 to have a feature called NIPS?

Why? 

So you can show your NIPS while shaking your HIPS?

[Chaos18]

Ok then a NIPS will be a waste of time i guess?

But i think this wont be and that is a feature on what Arovax SmartHide does?

If you want to know what it is read in the link below.

http://www.smarthide.com/


This could be effective and i believe its unique.

Also i say for Comodo to have it as it is a first line of defence and Arovax SmartHide is in slow development.

[Someone]

NIPS exists in some form in Comodo. Maybe start a thread comparing Kerio's NIPS and Comodo's similar/missing features. That way we can find out if anything's missing.

[Soyabeaner]

Chaos18 already started a thread on NIPS: http://forums.comodo.com/index.php/topic,7194.0.html

[GunnerGuyven]

Just started using Comodo after it was demonstrated in a security class at my college.  I'm a longtime user of Kerio and was looking for something that's Vista ready (or atleast is under active development).  I note Comodo has a new version coming soon that will be Vista compatable, and in the meantime I'm using it in XP.

That all said, there's a few features I miss from Kerio.  I browsed through the previous comments here and either saw vague mention of some of these or none at all... or I'm just blind.  Either way, doesn't hurt for me to reiterate.

Big A-#1 needed feature for me... let me resize the window.  Being able to maximize is great atleast, but I really need to be able to just drag the window out laterally to get more info on the screen.  This is especially a pain on the activity and log monitor screens because so much info is compressed into the one or two columns.

Another feature I'd like to see is the ability to determine the speed of connections in a readable format like Kb/s or KB/s.  This is a large part of what a firewall is to me, is a network monitor (not just policeman).  Speed is a big part of determining if I want to allow an application to continue it's business.

Since we're talking wishlists, I'll throw in a feature I've been craving for ages and haven't found in any firewall yet: per-connection or per-application throttling.  I'd LOVE to see this in a future release of Comodo!

Not a feature, just a bug I've observed that needs attention:
There's a mystery issue with certain p2p software clients like emule... after you close the application, the connections stay visible in Comodo indefinitely.  Only a restart of the firewall clears them.  By indefinitely I mean forever until restart... it's not a matter of those connections being left open by the application, because in other firewalls and network monitoring tools I observe the connections eventually disappearing as they time out.  Perhaps being able to set such a timeout would be most beneficial.

Thanks for a great product guys!  I look forward to the next (vista ready) release!

[Avitar.Net]

I would love to see support for Windows XP x64 in the near future. By far this appears to be one of the best firewalls around so I lookforward to it.

 (S)

[Soyabeaner]

Welcome to the forum, Avitar.Net.

Devs are already working on this in V3

[acky]

thank you for a great product.


my wish is ban ip for time, for 1 hour, 2 hours etc

and create rules that expire in time lets say block udp on some port or ip for the next 10 hours.


thank you.

[Tags:]