Welcome, Guest. Please login or register.
December 01, 2009, 04:13:41 AM

Login with username, password and session length

338989 Posts
37527 Topics
85129 Members

Latest Member: cnnavarro

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Archive Boards
| |-+  Comodo Firewall
| | |-+  Help for v2
| | | |-+  Webservices are getting blocked
« previous next »
Pages: 1 [2] Go Down Print
Author Topic: Webservices are getting blocked  (Read 2187 times)
Goon
Newbie
*
Offline Offline

Posts: 10


« Reply #15 on: May 05, 2007, 03:16:51 PM »

Trying default.asp yields the same results.   Fails with Comodo security set to Custom, works fine with Comodo security set to Allow All.   No additional info in the logs, no popups.   I'll try the reinstall now...

Grrrr, reinstall did not change a thing.  Exact same behavior.

« Last Edit: May 05, 2007, 03:29:13 PM by Goon » Logged
jasper2408
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 651


« Reply #16 on: May 05, 2007, 03:45:14 PM »

Trying default.asp yields the same results.   Fails with Comodo security set to Custom, works fine with Comodo security set to Allow All.   No additional info in the logs, no popups.   I'll try the reinstall now...

Grrrr, reinstall did not change a thing.  Exact same behavior.


OK, I have no hair left!!!

Have you tried using your IP address instead of localhost?

I have seen some problems with 2K on here but never paid any attention as to what those problems were and if they got resolved or not.

I don't have 2K anymore or I would install it to see what I get.

You might have to put a support ticket in and let the dev guys look at this to see if they can dig deeper than us. Also the new firewall should be out in a week or so and that may fix the problem you are having.

jasper

Logged

CFP 3.0.22.327beta  CMF   Avast Pro  SAS Pro Sandboxie Win XP PRO SP2 (x32)
Quill
Volunteer
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 2727


Follow the White Rabbit...


« Reply #17 on: May 06, 2007, 03:17:23 PM »

Hi Goon.

Just some thoughts. I have set CFP 'Alert Frequency' (Advanced/Misc/Alert Frequency) to Very High. Installed IIS (XP/SP2) and received numerous prompts for inetinfo.exe.

I haven't created any additional rules in Network Monitor but my Application Monitor rules now include six additional rules for inetinfo.exe.

inetinfo.exe 0.0.0.0 80 TCP In Allow
inetinfo.exe 0.0.0.0 443 TCP In Allow
inetinfo.exe 0.0.0.0 25 TCP In Allow
inetinfo.exe 127.0.0.1 1024 - 4999 UDP OUT Allow (modified by me - port range)
inetinfo.exe 0.0.0.0 1024 - 4999 TCP In Allow (modified by me - port range)
inetinfo.exe 127.0.0.1 1024 - 4999 TCP Out Allow (Modified by me - port range)

These rules allow me to connect and perform administrative tasks.

Try setting the Alert Frequency to VH, connect to IIS, Allow and Remember. Then modify the rules. You will probably want to place these rules into the home zone, unless you need access to IIS from the Internet.

Toggie
Logged

"Well, I've wrestled with reality for 35 years, Doctor, and I'm happy to state I finally won out over it."

Forum Policy
Goon
Newbie
*
Offline Offline

Posts: 10


« Reply #18 on: May 07, 2007, 09:12:01 AM »

I'm baffled like Jasper... this morning everything is working as expected!   I made no changes to anything, it just automagically started working.  :/
Logged
jasper2408
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 651


« Reply #19 on: May 07, 2007, 10:32:19 AM »

I'm baffled like Jasper... this morning everything is working as expected!   I made no changes to anything, it just automagically started working.  :/

Maybe forcing the reloading of "inetinfo.exe" and all of the dll's again let it see all of the appropriate info that it didn't see on the first time.

Good to hear you got it working.

jasper
Logged

CFP 3.0.22.327beta  CMF   Avast Pro  SAS Pro Sandboxie Win XP PRO SP2 (x32)
Goon
Newbie
*
Offline Offline

Posts: 10


« Reply #20 on: May 14, 2007, 11:32:46 AM »

Ok now this is getting annoying... Comodo is now blocking inetinfo.exe as suspicious this morning with no popup dialog.   Nothing has changed on my network, machine or Comodo settings.   Help please, I really don't want to go back to Zone Alarm but it seems I may be forced to. 
Logged
Quill
Volunteer
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 2727


Follow the White Rabbit...


« Reply #21 on: May 14, 2007, 11:50:28 AM »

Hi Goon.

In the pictures you posted earlier, inetinfo.exe was being flagged as suspicious by the 'Application Behaviour Analysis' subsystem of CFP. ABA  is used to monitor low level communications between components of your system, such as DLL injection, Interprocess communication etc.

Clearly ABA believes something has changed (the detail should be in the log entry?) and is alerting you to the fact. You could try disabling ABA, but that really is turning off a BIG part of the security CFP offers. It might, however, provide a first step, in solving the puzzle.

Toggie

 
Logged

"Well, I've wrestled with reality for 35 years, Doctor, and I'm happy to state I finally won out over it."

Forum Policy
Goon
Newbie
*
Offline Offline

Posts: 10


« Reply #22 on: May 14, 2007, 12:22:52 PM »

I "allowed all activities" to inetinfo.exe so I can get some work done.  I'll mess with it after work to see if I can get more info on what ABA finds suspicious.  Thanks
Logged
Tags:
Pages: 1 [2] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.05 seconds with 18 queries.
Powered by SMF 1.1.10 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com