Emule and bittorent tuttorials

[Guest]

[gnesha]

Hi,

I'm not really a new user of CPF. I've browsed the forums but have not spoken up till now.

I had no problems with utorrent until 1 day when it suddenly showed that the port was blocked (it was green the few weeks before). I tried every setting in the forums but I still can't get it to turn green. I've even shut down comodo & reinstalled it several times but to no avail.

I realised that the issue is not with CPF since the port showed that it's blocked even when CPF & nod32 is shut down. Can anyone give me any suggestion to solve my problem ?

Thanks in advance !

[BiZ]

Hi !

I hope my language is not so bad (i'm not english).

I discover Comodo and I don't really understand why it is necessary to create rules for emule/torrent and not for other softwares just need to be allowed in the application monitor ?

I am also wondering if the network controler have priority over the application monitor or if it's the reverse ? So, when I allow all inbound connections to 1214 TCP for example, am I doing it for all applications ??

Thanks for 

[Cubic]

Hi all first of all two thumbs up for the devs for bringing us this great firewall. Have used Sygate for ages but since it is no longer updated I finaly changed to Comodo...and I'm loving it! 

Everything works out for me and I'm very happy with the program except for a frustrating problem with emule.
I've searched the web for solutions during the past couple of hours and tried them (like the network monitor rules solution described in the first post) but it just doesn't work. Emule keeps giving a Low-ID and the TCP test fails if I try! Before I used comodo I never had a Low-ID and i've been using my donkey for more then three years now!

I've added rules to the network monitor as mentioned in the first post, bumped them up the ladder, added emule to the aplication, rebooted the computer and.....nada! No effect! Still getting a Low-ID! 

Any help would be greatly appreciated by you guys.

Thanks!

[AOwL]

Hi all first of all two thumbs up for the devs for bringing us this great firewall. Have used Sygate for ages but since it is no longer updated I finaly changed to Comodo...and I'm loving it! 

Everything works out for me and I'm very happy with the program except for a frustrating problem with emule.
I've searched the web for solutions during the past couple of hours and tried them (like the network monitor rules solution described in the first post) but it just doesn't work. Emule keeps giving a Low-ID and the TCP test fails if I try! Before I used comodo I never had a Low-ID and i've been using my donkey for more then three years now!

I've added rules to the network monitor as mentioned in the first post, bumped them up the ladder, added emule to the aplication, rebooted the computer and.....nada! No effect! Still getting a Low-ID! 

Any help would be greatly appreciated by you guys.

Thanks!

Have you checked the log if anything is getting blocked?
Do you have default rules except for your Emule rule in network monitor?

[Little Mac]

Hi,

I'm not really a new user of CPF. I've browsed the forums but have not spoken up till now.

I had no problems with utorrent until 1 day when it suddenly showed that the port was blocked (it was green the few weeks before). I tried every setting in the forums but I still can't get it to turn green. I've even shut down comodo & reinstalled it several times but to no avail.

I realised that the issue is not with CPF since the port showed that it's blocked even when CPF & nod32 is shut down. Can anyone give me any suggestion to solve my problem ?

Thanks in advance !

You'll probably want to use a utility like TCPView, PortQuery, FPort, etc to see what has caused that port to be closed.

Also, did you do/have any updates to your utorrent application?  An update might have changed its configuration in some way...

LM

[Cubic]

Have you checked the log if anything is getting blocked?
Do you have default rules except for your Emule rule in network monitor?

Yes, I just got the default rules next to my emule rules in Network Monitor. I even tried bumping them to first and second place (0 and 1).
I've checked my logs and Comodo is blocking something during Emule startup but I dunno what to make of it...

Here's a copy/paste taken from the Comodolog from Windows startup till Emule startup occuring at 21:59.

Date/Time :2007-01-22 21:59:32Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = HOST UNREACHABLE)Protocol:ICMP IncomingSource: 219.145.97.57 Destination: 212.83.71.176 Message: HOST UNREACHABLE Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:59:27Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)Protocol:ICMP IncomingSource: 66.162.178.102 Destination: 212.83.71.176 Message: PORT UNREACHABLE Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:59:22Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)Protocol:ICMP IncomingSource: 88.161.137.29 Destination: 212.83.71.176 Message: PORT UNREACHABLE Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:59:22Severity :MediumReporter :Network MonitorDescription:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)Protocol:ICMP IncomingSource: 83.149.102.1 Destination: 212.83.71.176 Message: PORT UNREACHABLE Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:57:17Severity :MediumReporter :Network MonitorDescription: Outbound Policy Violation (Access Denied, Protocol =  IGMP)Protocol:IGMP OutgoingSource: 212.83.71.176 Destination: 224.0.0.22 Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:57:17Severity :MediumReporter :Network MonitorDescription:Outbound Policy Violation (Access Denied, ICMP = ROUTER SOLICITATION)Protocol:ICMP OutgoingSource: 212.83.71.176 Destination: 224.0.0.2 Message: ROUTER SOLICITATION Reason: Network Control Rule ID = 7
Date/Time :2007-01-22 21:57:17Severity :MediumReporter :Network MonitorDescription: Inbound Policy Violation (Access Denied, IP = 10.21.128.1, Port = dhcp(68))Protocol: UDP IncomingSource: 10.21.128.1:bootp(67) Destination: 255.255.255.255:dhcp(68) Reason: Network Control Rule ID = 7

My config is Win XP Pro SP2 including latest updates, Windows Security center disabled (so no Defender, Win Firewall etc.), AVG Antivirus Free 7.5 and AVG Anti-Spyware 7.5 running in the background next to Comodo.

[Vicont]

You are not wide open.
The first line of defence of CFW is "Network monitor".
The second line of defence is "Application Monitor". If no programs access the ports that you open in network monitor, then those ports are blocked and stealthed by the "Application Monitor"

Hi, from Russia ! Yes, but when my eMule is working 36553 TCP port, for example, is open from outside for all the world, not only for eMule ! pcflank test shows just this fact !
And this is not good
Am I right ?...

[Pina]

pcflank test shows just this fact !

OK, someone's done pcflank test pandlouk
So how does it really work? TEN Information (Access Granted) logs every 5 seconds is not just my imagination.

[Hren$Gori]

Why when i only add eMule as trusted application to Application Control Rules and sellect Skip Advanced Security Checks for this application i can still see firewall blocking incoming UDP packets saying they bogus, i still got low ID even when i uncheck all options in Advanced Attack Detection and Prevention.

P.S. I don't like idea to open any port in Network Control Rules.

[AOwL]

You have to open a port in network monitor to get it to work.
When you don't use it, it's stealthed from internet, so no need to worry.

[Hren$Gori]

You have to open a port in network monitor to get it to work.
When you don't use it, it's stealthed from internet, so no need to worry.

Okay i understand this, but can someone explain why this does not work by disabling Advanced Attack Detection and checking Skip Advanced Security Checks for application, isnt this only thing that was stopping incoming connections?

[AOwL]

Okay i understand this, but can someone explain why this does not work by disabling Advanced Attack Detection and checking Skip Advanced Security Checks for application, isnt this only thing that was stopping incoming connections?

No, it's not the same thing.

[Cubic]

You have to open a port in network monitor to get it to work.
When you don't use it, it's stealthed from internet, so no need to worry.

I've done that, like explained before but I still get a low ID! I really dunno what to do and make out of the logs! Comodo works great except for it's problem with Emule.

Anybody got any ideas how to resolve my problem?

[AOwL]

The first thing I can ask, is if you use the same port on TCP and UDP?
If not, try it.

I guess that you have followed the guide in the first post in this thread, but I'm gonna ask you anyway, if you have disabled UPnP in Emule?

[Cubic]

I've changed settings so that my UDP port is the same as my TCP port, updated my Network monitor rules, restarted my computer but my problem remaines unresolved. I still get a LowID.

As for UPnP, there is no setting in Emule's standard or advanced config to disable it.

For more info on my configuration or logs chack a few posts back.

I really hope anyone has a solution for this problem.

[Tags:]