I just wanted to know if there was a way to set Comodo Personal Firewall to allow the user to select if the program should access the internet or not.
For example when I installed Comodo Personal Firewall today it recognized the typical programs and popped up whether or not I wanted to allow it internet access or not. (Firefox, Gmail Notifier, etc)
However it did not do this for Steam.exe (a gamming application). It automatically blocked Steam and created instances in the log so I had no way of knowing Comodo was blocking steam until I checked the logs. I had to manually define a new trusted application and check the two boxes under misc. Only after I did that did Comodo show the popup with Allow/Block.
Now i’m having trouble with sharing files over a network, specifically sharing file with my roommate on the same router.
It would be great if I could see a popup asking if I did indeed want my roommate to access my files and vice versa instead of automatically blocking it.
My second question would be how do I set Comodo to allow the file sharing/access between my roommate and I? I believe I can add a Network Control Rule, but wouldn’t that leave the specified ports “open” to other events/programs?
Version: 2.3.6.81
Other thoughts just pertaining to this firewall:
So far Comodo Personally Firewall has been a good product and easier than I though it would be to use.
No freezing or hogging of resources to report thus far, but I only used it for one day. I did have it crash once, but Comodo kept running so I couldn’t tell if it was a real crash or not.
I kinda wanted a firewall that also allowed the users to block programs, but blocking internet access is good enough. Kerio (firewall/program controller) became a real pain when it started freezing up constantly (100% CPU) and in the latest updates I couldn’t figure how to configure it with bittorrent.
Go to security/advanced/misc and uncheck “Do not show any alerts…”
On the same page move the “alert” slider to the top.
You can of course remove rules so you have to allow/block them again.
For example when I installed Comodo Personal Firewall today it recognized the typical programs and popped up whether or not I wanted to allow it internet access or not. (Firefox, Gmail Notifier, etc)
However it did not do this for Steam.exe (a gamming application). It automatically blocked Steam and created instances in the log so I had no way of knowing Comodo was blocking steam until I checked the logs. I had to manually define a new trusted application and check the two boxes under misc. Only after I did that did Comodo show the popup with Allow/Block.
Now i'm having trouble with sharing files over a network, specifically sharing file with my roommate on the same router.
It would be great if I could see a popup asking if I did indeed want my roommate to access my files and vice versa instead of automatically blocking it.
My second question would be how do I set Comodo to allow the file sharing/access between my roommate and I? I believe I can add a Network Control Rule, but wouldn't that leave the specified ports "open" to other events/programs?
No, it wont be open.
Yes, you should create a network monitor rule for the port in your torrent program.
move the rule up in the list, to the top or just below your “zone” rules.
Version: 2.3.6.81
Other thoughts just pertaining to this firewall:
So far Comodo Personally Firewall has been a good product and easier than I though it would be to use.
No freezing or hogging of resources to report thus far, but I only used it for one day. I did have it crash once, but Comodo kept running so I couldn’t tell if it was a real crash or not.
I kinda wanted a firewall that also allowed the users to block programs, but blocking internet access is good enough.
Kerio (firewall/program controller) became a real pain when it started freezing up constantly (100% CPU) and in the latest updates I couldn’t figure how to configure it with bittorrent.
Don’t forget to restart the firewall if the rules doesn’t seem to work. Maybe a reboot of the computer can resolve issues.
Please post back how it goes.
I’ll post updates during this week since it might take a few tries to test those functions.
Another question:
When the firewall blocks these two instances does it affect anything? Svchost seems to be “used” by many programs such as updates, time, and the printer. I know I can still print, but would the block affect the auto clock update or any other Windows XP updates?
Severity :High
Description: Application Access Denied (svchost.exe:192.168.1.103:dhcp(68))
IP address may vary for the above.
So far I can’t really reproduce the problem I did have with the popup with Steam.exe
I removed Steam.exe from the Application Control Rules and ran steam.exe, but this time it did show the popup.
Also just a while ago there was a popup asking if I wanted to allow internet access:
Severity :High
Reporter :Application Behavior Analysis
Description: Suspicious Behaviour (svchost.exe)Application: C:\WINDOWS\system32\svchost.exeParent: C:\WINDOWS\system32\services.exeProtocol: UDP OutDestination: 255.255.255.255:bootp(67)Details: C:\Documents and Settings\Will\Local Settings\Temp\Set95.tmp has tried to use C:\WINDOWS\system32\svchost.exe through OLE Automation, which can be used to hijack other applications.
I noticed when that popup came up I had absolutely no internet access (couldn’t even get to my router).
When I looked at it, it did not look legit so I denied it access and I still had no internet. I am guessing perhaps allowing it would have allowed the connection to the internet, but a TEMP using svchost.exe is not something that looks legit…
I wish I got a screen shot of it before I denied it, but the logs bascially showed everything on the popup.
(Reboot fixed the problem)
svchost is a legit process and needed by some apps and with services.exe it should be allowed as long as it’s not any else “untrusted” involved.
You can always allow without remember if you are not sure.
There are some issues with OLE that hopefully will be resolved when the next version is released. You can get a pop up that, lets say, steam is using firefox to get out on the net, even if you have closed steam… (CPF remembers the last used app) so if you deny that, you will not be able to go out on the net. Restart the app and try again, and don’t tick remember… some users does have to reboot the comp…
I have to ask you again, do you want MORE pop ups or LESS pop ups?
Ah, I prefer more popups, but that can easliy be set with the Alert Frequency Level.
Thanks for the help and I will be looking foward to the updated version. ;D
