Online Gaming and how to enable Comodo firewall for it

[Guest]

[Melih]

Answers pls :-)

[pandlouk]

Well this is a bit general question.
The first thing to do is to find which ports the game uses for going on line. After you have founded the ports you can open them by following the bittorent tutorial which can be found here:

http://forums.comodo.com/index.php/topic,411.0.html

ps. it will not work if a game uses the UPNP feature of windows (in this chase the games uses multiple and frequently changing ports). The only way that I can think of, is adding a temporarly rule like this:

Action = Allow
Protocol = TCP or UDP
Direction = In
Source IP = Any
Remote IP = your IP adress (or "Any" )
Source port = Any
Remote port = add a range from 0 to 65000

but remember to use this rule only temporarly( UPNP is one of the most dangerous feature for on-line security)

[panic]

Well this is a bit general question.
The first thing to do is to find which ports the game uses for going on line. After you have founded the ports you can open them by following the bittorent tutorial which can be found here:

http://forums.comodo.com/index.php/topic,411.0.html

ps. it will not work if a game uses the UPNP feature of windows (in this chase the games uses multiple and frequently changing ports). The only way that I can think of, is adding a temporarly rule like this:

Action = Allow
Protocol = TCP or UDP
Direction = In
Source IP = Any
Remote IP = your IP adress (or "Any" )
Source port = Any
Remote port = add a range from 0 to 65000

but remember to use this rule only temporarly( UPNP is one of the most dangerous feature for on-line security)

NO! NO! NO!

In the rule you've defined (see below), you are allowing ALL traffic from ANY adddress access via ANY port. Deleting the BLOCK rule would have exactly the same effect, as would turning the firewall off.

Action = Allow
Protocol = TCP or UDP
Direction = In
Source IP = Any
Remote IP = your IP adress (or "Any" )
Source port = Any
Remote port = add a range from 0 to 65000

I'm not aware of any games that require UPnP. All the one I've ever come across have dedicated send/receive ports, and these ports are the one that need to be explicitly setup in a rule. The required ports are usually outlined on the game manufacturers website.

Ewen :-)
 (WCF3)

[pandlouk]

NO! NO! NO!

In the rule you've defined (see below), you are allowing ALL traffic from ANY adddress access via ANY port. Deleting the BLOCK rule would have exactly the same effect, as would turning the firewall off.

Action = Allow
Protocol = TCP or UDP
Direction = In
Source IP = Any
Remote IP = your IP adress (or "Any" )
Source port = Any
Remote port = add a range from 0 to 65000

I'm not aware of any games that require UPnP. All the one I've ever come across have dedicated send/receive ports, and these ports are the one that need to be explicitly setup in a rule. The required ports are usually outlined on the game manufacturers website.

Ewen :-)
 (WCF3)

Neither I know any game that uses it but I have not played all games out there.

As for what you say about this rule you are quite wrong. It is not the same as deleting the default block rule and it does not allow all trafic (at least not all the protocols).

I have just finished doing varius tests with this rule on position #0 and my computer is completed stealthed. Just take a look at one of them made on http://www.grc.com
------
GRC Port Authority Report created on UTC: 2006-06-12 at 02:19:37

Results from scan of ports: 0-1055

    0 Ports Open
    0 Ports Closed
 1056 Ports Stealth
---------------------
 1056 Ports Tested

ALL PORTS tested were found to be: STEALTH.
-----------

Right now I  make a stealth test at pcflank for the range 8000-9000. I will post the results when the test finishes.

ps. I never reply or suggest a rule, if I have not tested personally and be sure that it is safe to be used by the others

[pandlouk]

And here is the result from pcflank

 Port:               Status     Service     Description
9000-10000   stealthed     n/a     n/a

Pretty impressive. Right?
 

[panic]

Glad to hear it, but I don't understand how it's different? If this rule is allowing all traffic from all IPs to any ports, how can it block?

P.S. Shields UP ain't the test it should be, and Steve Gibson ain't the expert he would like you to believe. He's clever, but he's a better hype artist / journalist than propellorhead.

Ewen :-)

P.S. Congrats on making 200 posts!
 (WCF3)

[pandlouk]

Glad to hear it, but I don't understand how it's different? If this rule is allowing all traffic from all IPs to any ports, how can it block?

P.S. Shields UP ain't the test it should be, and Steve Gibson ain't the expert he would like you to believe. He's clever, but he's a better hype artist / journalist than propellorhead.

Ewen :-)

P.S. Congrats on making 200 posts!
 (WCF3)

Thanks
A TCP/UDP rule allows traffic for TCP and UDP protocols but blocks the attacks because from the version 2.1.0.1 and later if a port is not being currently used by any program CPF stealths it.
It is different from a rule that will allow all traffic where  Protocol = Any (this last one will allow netbios and other kind of attacks).

ps. I have also checked the vulnerability on pcflank, symantec and other sites. It took me about 2 hours for compleeting the tests. And on every single test my computer was stealthed.

[panic]

Sweet. This is quite similar to Firewall1's adaptive stealthing. Thanks for the info - much appreciated.

Are you going to watch the Aussies tonight against Japan? How do you think we'll go?

Ewen :-)

[antiKK]

I'm not aware of any games that require UPnP.

I just installed Pro Evolution Soccer 5 ( to re-enact the WC games) and noticed that it uses UPnP.
It is available as an option and can be disabled and a specific port used, so it's not really required.
Interesting either way.

And I think we'll win 3 - 1 after a very painful first 84 minutes.

[panic]

I just installed Pro Evolution Soccer 5 ( to re-enact the WC games) and noticed that it uses UPnP.
It is available as an option and can be disabled and a specific port used, so it's not really required.
Interesting either way.

And I think we'll win 3 - 1 after a very painful first 84 minutes.

Interesting. IMHO, UPnP is a solution looking for a problem. The worst bit about it is it's pervasiveness and it's potential for the service being compromised. I usually turn UPnP off and I haven't suffered from the lack of it.

You predicted a 3-1 win after 84 minutes?? OK Nostradumbass, what's your tip for the next game BEFORE IT HAPPENS??? 

I reckon Brazil by 2-1 or 2-0.

cya
Ewen :-)
Aussie -  (WCF3) (WCF3) (WCF3) Japan - (WCF17) OI OI OI!

[egemen]

Sweet. This is quite similar to Firewall1's adaptive stealthing.

You, smart techies!
Good luck to  (WCF3) in world cup!

Egemen,
 (WCF15)

[antiKK]

Next game (in our group)
 (WCF6) 1 - 2 (WCF4)
then
 (WCF3) 1 - 1  (WCF4)

[Arkangyal]

I must admit that these won't solve the problems if people are starting the game from different locations, some examples: Desktop, Total Commander, command prompt, etc. I hope learning the parent is working with them if not the users mightn't see that commodo asks Allow/Deny as the game is usually loading with full screen.
For this reason maybe comodo should activate it's window on top of anything (a switch would be good).

[Arkangyal]

Little help for online gameing:

Game:	Starport GE
IP:	64.70.39.50
Ports:	7000 TCP 7809 UDP
Files:	Launchher.exe HEClient.exe

Game:	Shattered Galaxy
IPs:	64.124.47.70/64.124.47.71
Ports:	3000 TCP 2054 UDP
File:	SG.exe

[Júštiñ™]

Please look here

http://forums.comodo.com/index.php/topic,668.0.html

[Tags:]