Utorrent problems

[Guest]

[dazed1]

But i was told Utorrent should not be threat as safe application? hence why i even add rules for it, i could add threat as safe application from the start? or the rules still apply even after you set utorrent as safe application?

Thanks guys i'm sorry for confusion

[BoredNow]

.... on every restart of utorrent i get the same alarm i set as web browser and later again in application rules i change Utorrent from custom to Utorrent, do i have to do this all the time?

Thanks alot for the help and patience !

No never treat it as safe or trusted, P2P programs are a major malware "threat-gate"


So you are saying that when you go to ->
Firewall ->
Network Security Policy ->
Application Rules ->
right click utorrent and select - Edit ->
you tick the - Use a predefined policy button ->  
you select - utorrent ->
and then you click APPLY
and then you click OK at the bottom of the page (see attach)
that it doesn't remember?

If so something is very wrong.

[dazed1]

Yes, after i do exactly what you said (and i can see all 5 rules listed under Utorrent entry in (application rulles) its setup as Utorrent.


After i restart Utorrent, i get firewall alarm,

Utorrent is trying to connect to internet,

Remote 208.72.192.133-TCP

http(80)

Allow this request- threat this application as = no Utorrent setting...i have to press web browser and then change Utorrent from custom in application rules to Utorrent again, and again..

[BoredNow]

Allow this request- threat this application as = no Utorrent setting...i have to press web browser and then change Utorrent from custom in application rules to Utorrent again, and again..

So you select Web Browser...but when you go to...Application Rules under the
Firewall ... it's listed as CUSTOM ??...instead of WEB BROWSER.

Anyway, the reason I emphasized...
 
"you select - utorrent ->
and then you click APPLY
and then you click OK at the bottom of the page

is because once I made the mistake of not clicking APPLY and OK
and I was confused why Comodo was not remembering
my instructions.

But if your are clicking OK then all I can say is that
maybe some of your old rules are confusing the firewall and thats why
Utorrent doesn't appear in the initial Firewall alert.

I'm curious, when you get the Firewall alert, what options are available
in the drop down list??

[dazed1]

Yes it says Custom,

Ok will try to remove the rules and add them again

[BoredNow]

Maybe if you select REMOVE instead of EDIT (it won't remove your rules,
it will just remove it from the list) then the firewall will start from scratch.

Also, what options appear in the drop down list when the Firewall alert
pops up??

see attach...

[dazed1]

The same from your picture, dude.

So your saying i should press edit and then delete the rules? and start from scratch? if i understand correctly.

Thanks man and sorry for bothering you..maybe best option is to reinstall Comodo?

[BoredNow]

No
I said maybe if you go to -> Firewall
-> network Security Policy
-> find Utorrent in the list of applications
-> rightclick, and choose REMOVE

it will remove it from the list but it won't remove your rules.

Then the next time you open Utorrent the firewall will be
starting from scratch.

This probably wont work, but I'm just "grasping at straws".
Frankly, I don't consider myself an "expert" in these matters, I am
only going by my personal expediences.

Also, could you check to see if Utorrent is in the 'Application Policy' list.
see attach...

I don't think you answered me the first time I asked you.

[dazed1]

Yes it is listed in network policy, thanks for your time i think i'm going to reinstall Comodo and start from scratch you guys are really helpful thanks one more time, highly appreciated 

[dazed1]

Ok here is what i got now,











And again, Utorrent is listed as custom in application rules, and it has only one rule under it (applied) as well, even after i setup it to be threat as Utorrent during the alarm of firewall, and what is most strange under predefined polices is listed as Utorrent, go figure...


For what is worth there are no blocks from firewall  to Utorrent in the firewall events tab what i would like to know now (because there is no more alarm from firewall when i turn on Utorrent) is how to see does it Utorrent threat as Utorrent? or again its custom.

[k1kk3l1]

Just tick the radio button "Use predefined policy", choose UTorrent, click "apply", click "OK", be happy.

[dazed1]

Just tick the radio button "Use predefined policy", choose UTorrent, click "apply", click "OK", be happy.

I did that before and it resulted in permanet detecting of Utorrent by the firewall and making a corruption with the rules i added and saved previous as custom  in Network Security Policy>Predefined Policies, because they are added by default as custom, changing the option you suggest will lead to corruption from my experience, are you sure it will work?

Thanks for your replay

[BoredNow]

I did that before and it resulted in permanet detecting of Utorrent by the firewall and making a corruption with the rules i added and saved previous as custom  in Network Security Policy>Predefined Policies, because they are added by default as custom, changing the option you suggest will lead to corruption from my experience, are you sure it will work?

Thanks for your replay

Yes, that's the only way to set it, other than selecting it in the firewall
alert drop down list.

If you want the firewall to popup and ask you again you have to remove
the application from that list.
It won't erase your rules, so don't worry about that.

When an application shows up in the application list (your 2nd pic.) it's because you
ticked the "Remember" box in the firewall alert.

For example, I didn't want the firewall to automatically allow my web browser
to connect to the internet. But I had already ticked the "remember" box.
So I went into the list of apps and removed it.
Now the firewall asks me everytime the browser is launched.

So I suggest....
Remove utorrent from that applications list (the 2nd picture)
Launch Utorrent
When the firewall pops up, choose Utorrent from the drop down list and
tick the "Remember" box.

[dazed1]

BoredNow, I just did what you suggest, but my problems are back now after the short succes.

For 2 mins Utorrent was listed as Utorrent in Application rules, but just to test it i restart Utorrent and....

Mass firewall pop-ups, without option threat as Utorrent, even i set it before threat as Utorrent and it was listed as Utorrent in application rules, after i did exactly what you said, and it worked for just 2 minutes.

So now, Utorrent is listed as Utorrent in application rulles but only cause i don't answer yet on firewall alert in which there is no option threat as Utorrent, if i set it to web browser we are back to custom...which kill the "hard work" for noob like me did  till now.










And no, under this pic (3rd one) i cant choose use predifined polilcy - threat as Utorent, is grey out.



Threat this application as = no Utorrent settings now again, i'm pulling my hair off here...


I'm now im off to set it as Webrowser again    if i press threat as web browser, does it kill the purpouse of the added rules, or they will overwrite the web-browser settings? because i will eventually have to answer the firewall pop-ups and put some setting..

Thanks again, if anyone is willing to use team viewer in order to solve this pm me please, thanks...

[Radaghast]

One of your utorrent rules allows for outgoing TCP connections. If this rule is using a port range such as 1024-65535, you will get an alert, as you did above, which is for TCP outbound on port 80.

[Tags:]