Webservices are getting blocked

[Guest]

[Goon]

Trying default.asp yields the same results.   Fails with Comodo security set to Custom, works fine with Comodo security set to Allow All.   No additional info in the logs, no popups.   I'll try the reinstall now...

Grrrr, reinstall did not change a thing.  Exact same behavior.

[jasper2408]

Trying default.asp yields the same results.   Fails with Comodo security set to Custom, works fine with Comodo security set to Allow All.   No additional info in the logs, no popups.   I'll try the reinstall now...

Grrrr, reinstall did not change a thing.  Exact same behavior.

OK, I have no hair left!!!

Have you tried using your IP address instead of localhost?

I have seen some problems with 2K on here but never paid any attention as to what those problems were and if they got resolved or not.

I don't have 2K anymore or I would install it to see what I get.

You might have to put a support ticket in and let the dev guys look at this to see if they can dig deeper than us. Also the new firewall should be out in a week or so and that may fix the problem you are having.

jasper

[Quill]

Hi Goon.

Just some thoughts. I have set CFP 'Alert Frequency' (Advanced/Misc/Alert Frequency) to Very High. Installed IIS (XP/SP2) and received numerous prompts for inetinfo.exe.

I haven't created any additional rules in Network Monitor but my Application Monitor rules now include six additional rules for inetinfo.exe.

inetinfo.exe 0.0.0.0 80 TCP In Allow
inetinfo.exe 0.0.0.0 443 TCP In Allow
inetinfo.exe 0.0.0.0 25 TCP In Allow
inetinfo.exe 127.0.0.1 1024 - 4999 UDP OUT Allow (modified by me - port range)
inetinfo.exe 0.0.0.0 1024 - 4999 TCP In Allow (modified by me - port range)
inetinfo.exe 127.0.0.1 1024 - 4999 TCP Out Allow (Modified by me - port range)

These rules allow me to connect and perform administrative tasks.

Try setting the Alert Frequency to VH, connect to IIS, Allow and Remember. Then modify the rules. You will probably want to place these rules into the home zone, unless you need access to IIS from the Internet.

Toggie

[Goon]

I'm baffled like Jasper... this morning everything is working as expected!   I made no changes to anything, it just automagically started working.  :/

[jasper2408]

I'm baffled like Jasper... this morning everything is working as expected!   I made no changes to anything, it just automagically started working.  :/

Maybe forcing the reloading of "inetinfo.exe" and all of the dll's again let it see all of the appropriate info that it didn't see on the first time.

Good to hear you got it working.

jasper

[Goon]

Ok now this is getting annoying... Comodo is now blocking inetinfo.exe as suspicious this morning with no popup dialog.   Nothing has changed on my network, machine or Comodo settings.   Help please, I really don't want to go back to Zone Alarm but it seems I may be forced to. 

[Quill]

Hi Goon.

In the pictures you posted earlier, inetinfo.exe was being flagged as suspicious by the 'Application Behaviour Analysis' subsystem of CFP. ABA  is used to monitor low level communications between components of your system, such as DLL injection, Interprocess communication etc.

Clearly ABA believes something has changed (the detail should be in the log entry?) and is alerting you to the fact. You could try disabling ABA, but that really is turning off a BIG part of the security CFP offers. It might, however, provide a first step, in solving the puzzle.

Toggie

 

[Goon]

I "allowed all activities" to inetinfo.exe so I can get some work done.  I'll mess with it after work to see if I can get more info on what ABA finds suspicious.  Thanks

[Tags:]