How can I start comodo firewall to allow all connections?

[Guest]

[tharrisone]

I've had problems in the past with hackers who brute force logins and I've updated the security policy but it doesn't help.
In the past I have used Comodo and have been very amazed by how well it secures a machine.

I have to connect to this machine over the internet so I need a way to start comodo to allow all or I will be locked out of the machine.

Thanks for your help.

[Soyabeaner]

Welcome to the forum, tharrisone.

Right-Click on the FW systray icon, select Adjust Security Level, and Allow All.  This should only be done for testing/troubleshooting purposes, or in your case, something else.  Why would you want to risk it and allow all, if I may ask?

[tharrisone]

I am connecting via remote desktop to the machine which is 5000 miles from me.
If I start the firewall it will block all the ports and I will be locked out of the box.

I need a way to start the firewall and have it allow all.

[Ravenheart]

Far safer to allow connections from the IP you will be at, for the protocol types and ports that Remote Desktop will use.

[Quill]

Far safer to allow connections from the IP you will be at, for the protocol types and ports that Remote Desktop will use.

I couldn't agree more. leaving the firewall in Allow All mode is just asking for trouble.

[tharrisone]

Ok,

let me explain. If I reboot the machine after installing the firewall it will block all incoming ports. What I am trying to do is configure the firewall before my remote desktop connection is shutdown by the firewall. I cannot access the machine directly, only through remote desktop. So how can I configure it without it locking me out?

[Little Mac]

Have you tried accessing the FW GUI after installing, but before rebooting?  I've never tried this, so I don't know if it would work or not.  If you can, perhaps you can configure it prior to reboot, so that you can access it after boot.

LM

[kail]

As far as I'm aware.. CFP 2.4 does not support either remote installation or configuration. But, it is on the Wish List & Melih (the CEO) did say that they would address this in the future.. although it isn't clear if he meant CFP 3 beta (due today), probably not.. is my guess.

Edit: PS we tried very hard to get this working, no matter what we tried CFP defeated us on the reboot.

[pandlouk]

It can be done and it is quit easy to do it.

Here are the steps to take:

1. Install CFP with the default settings
2. *IMPORTANT* Uncheck Restart the computer at the final step and select finish
3. Import the setting from the AllowAll.reg included in the AllowAll.zip file that is attached at the end of my post.
4. Reboot the machine and you will see that CFP will start in Allow All mode.

Hope it helps,
Panagiotis

ps. Here is the registry entry that is included in the reg.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo]

[HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo\Personal Firewall]
"SecurityLevel"=dword:00000002

[kail]

I thought Protect own registry keys and files from unauthorized modifications was on (and active thanks to the drivers) by default?

[pandlouk]

I thought Protect own registry keys and files from unauthorized modifications was on (and active thanks to the drivers) by default?

Hi Kail, 

Yes, you are right, Comodo protects its own registry keys and files by default, but during the installation, the drivers are not active until the system is rebooted.

[panic]

It can be done and it is quit easy to do it.

Here are the steps to take:

1. Install CFP with the default settings
2. *IMPORTANT* Uncheck Restart the computer at the final step and select finish
3. Import the setting from the AllowAll.reg included in the AllowAll.zip file that is attached at the end of my post.
4. Reboot the machine and you will see that CFP will start in Allow All mode.

Hope it helps,
Panagiotis

ps. Here is the registry entry that is included in the reg.

WOW! Really clever lateral solution Pan.

This should be rewritten into a "How can I do a remote installation?" FAQ for CFP.

Good work Sherlock!

Ewen :-)

[Little Mac]

Good work!    I've added the post to the Tutorial Compilation thread, under Installation tutorials (with some slight editing to help with context).

LM

[pandlouk]

WOW! Really clever lateral solution Pan.

This should be rewritten into a "How can I do a remote installation?" FAQ for CFP.

Good work Sherlock!

Ewen :-)

Thanks Ewen. 

ps. there are also 2 other ways in achieving this but this one was the easier workaround. I had to find some way to control/update/fix the pc of my parents who live 2500miles away.

[kail]

Well done pandlouk, that is excellent stuff. 

[Tags:]