Comodo Firewall and Avast 7

[Guest]

[pc_pete]

The simple solution is to use whichever AV you wish but not use Avast 7 Web Shield as it was designed for Win8

More elaborately, Avast 7 uses Win7 supported (and Win8 only choice) WFP redirect API rather than TDI.
I assume CIS is still using TDI or something not fully compatible with Win7. 'Holes' in the firewall's protection  will continue to be a possibility until they implement a fully Win7&8 compatible solution.  

[Radaghast]

More elaborately, Avast 7 uses Win7 supported (and Win8 only choice) WFP redirect API rather than TDI.
I assume CIS is still using TDI or something not fully compatible with Win7.

egemen said

CIS uses TDI, WFP and NDIS to provide its firewall functionality. WFP maybe enough ti implement an average firewall but it is not enough for a firewall like CFW so that it could not be used alone wihtout the support of the other 2 technologies. Windows 8 allowed us to use WFP more than previous windows editions and it should not be a problem with the next CIS editions which support Windows 8.

Holes' in the firewall's protection  will continue to be a possibility until they implement a fully Win7&8 compatible solution.

I hope you've saved some criticism for Microsoft, as Avast and Avira web proxies have the same effect on Windows 7 firewall and from what I've seen, Avast 6 too.

[SnoopZ]

Is there going to be a fix for this with a new version of Comodo? As it doesn't look like Avast think it is broken?

[Rumpel]

I think WFP predates Windows 7 and I think avast7 is compatible with Vista.  So there probably should be concerns about earlier OS combinations such as Vista+Comodo+Avast7 too.  I can't recall reading of such a combination being tested, but perhaps someone has done so(?).  Edit: I went back through the thread and did see a post or two suggesting that Comodo on Vista was not affected.  So perhaps avast7 doesn't use WFP based redirection on OS's prior to Windows 7?

Rereading that "Windows 8 allowed us to use WFP more than previous windows editions and it should not be a problem with the next CIS editions which support Windows 8." comment, I think there are two interpretations:

1) Future versions of Comodo which support Windows 8 should fix the "avast7 type redirection issue" even when running on earlier WFP platforms such as Windows 7.
2) Future versions of Comodo will only fix the "avast7 type redirection issue" when running on Windows 8 or later.

I have seen some signs that there may be OS version specific differences in WFP.  I've yet to see it substantiated that the avast7 WebShield functionality is using some WFP feature that is OS specific.  I've also yet to see it substantiated that a firewall needs an OS version specific WFP feature in order to cope with the avast7 type redirection issue.  Should anyone be able to provide details on such subjects, I for one would enjoy reading them.

[kail]

I'm baffled, and somewhat concerned, by the amount of posters who seem to be completely ignoring the not-so-trivial fact that Windows 7 own Firewall demonstrates exactly the same problem with Avast's and Avira's web proxy.

[pc_pete]

egemen said
I hope you've saved some criticism for Microsoft, as Avast and Avira web proxies have the same effect on Windows 7 firewall and from what I've seen, Avast 6 too.

Yep!
it's only of lesser significance because most people don't configure MS FW for outbound filtering?

[Rumpel]

I'm baffled, and somewhat concerned, by the amount of posters who seem to be completely ignoring the not-so-trivial fact that Windows 7 own Firewall demonstrates exactly the same problem with Avast's and Avira's web proxy.

Another firewall (such as the Windows 7 firewall) having limitations doesn't by definition justify limitations in Comodo firewall.  Although it is theoretically possible that the other firewall has similar limitations due to limitations in the OS itself, it is also theoretically possible that isn't the reason for there being a similar limitation.

[kail]

Another firewall (such as the Windows 7 firewall) having limitations doesn't by definition justify limitations in Comodo firewall.  ..

I never said it did. However, it certainly does make a nonsense of some posts when they are aimed solely at CIS. Besides, my main concern with this issue (see my previous posts) is that the majority of users on W7 are probably just using W7's Firewall with one of these web proxies and thinking that they are fully protected.

Some may wish to call that a limitation, but at this point I'd prefer to call that an unmitigated disaster myself.

[Rumpel]

This being a Comodo forum, I would normally expect comments to focus exclusively on Comodo firewall.  Even in cases where the user is well aware that other firewalls have similar limitations.  So I wouldn't let that get to you.

Hopefully, those Windows 7 firewall users who are aware of the issue are in Windows 7 forums trying to get a proper response from Microsoft.

The masses who aren't even aware of the issue, well, I'm not sure what you do about them.  I suppose someone so inclined could start contacting media outlets, trying to get them to cover the subject.

[Boris 3]

From what egemen has said, my understanding is that the problem is inside win7. Hence the solution should come from Microsoft either through a patch or an SP2, but egemen doesn't think that to be needed and that a workaround would be enough.

Quote from egemen

It may not be necessary. For this particular issue, we may have a workaround. We are looking into it.

He was of course referring to the problem with Avast 7, but is it really the sole problem than the "limitations" of win 7 could yield?

[Rumpel]

Where is that quote from Boris 3?  If a public post, I'd like to find the full message and read the rest of it.

[wasgij6]

Where is that quote from Boris 3?  If a public post, I'd like to find the full message and read the rest of it.

It may not be necessary. For this particular issue, we may have a workaround. We are looking into it.

[kail]

This being a Comodo forum, I would normally expect comments to focus exclusively on Comodo firewall.  Even in cases where the user is well aware that other firewalls have similar limitations. ..

My apologies, I assumed that you had read this topic. However, I'm not aware of any other firewalls that have this issue currently. Do you know otherwise?

Also is there a significance to your use of "limitation" here..  do you believe it is a limitation of some sort?

[Boris 3]

Where is that quote from Boris 3?  If a public post, I'd like to find the full message and read the rest of it.

You can find it here : https://forums.comodo.com/beta-corner-cis/cis-beta-for-windows-8-customer-preview-t83044.0.html;msg592815#msg592815

[Rumpel]

Thanks Boris 3.  I saw that one, but either missed or forgot about the one which was a few posts later in that Windows 8ish thread:

https://forums.comodo.com/beta-corner-cis/cis-beta-for-windows-8-customer-preview-t83044.0.html;msg592834#msg592834

[Tags:]