Allow all outgoing connexions is dangerous

[fOrTy_7]

@languy99 post:17

I think a way around this rule would be to use the white list for the firewall also, if the application is signed and part of the white list it gets access, if not you get asked. I don’t think it would be to hard to implement and that way you will have security and ease of use.

You’re talking about firewall’s Safe Mode which is present in CIS since its beginning.

I personally have a problem with the way the new firewall policy is implemented rather than there exists such thing like allow all outgoing connections mode in CIS. By adding these weird policy to Application Rules in Network Security Policy, Comodo practically rendered Firewall Security Level setting completely useless. IMHO, here is how it should be done…

@fOrTy_7 post:41

The solution of this problem could be even more simple. CIS developers could simply add another firewall mode which would allow outgoing traffic and would block or (optionally) ask whenever there is incoming connection. This new firewall mode could replace weird application policy approach which is currently used.

Firewall default allow all ==> Allow Outgoing Mode
Normal firewall ==> Custom Policy Mode
Firewall only for untrusted ==> Safe Mode

Allow Outgoing Mode:

• allows outgoing connections for any application
• blocks or (optionally) asks whenever there is incoming connection

This new firewall mode would be consistent with currently used application policy for the whole suite installation and it would allow very easy to switch between other firewall modes.

Comodo Forum

[attachment deleted by admin]