Are this connections need to be blocked?

Help for v3
1

Hi i recently switched to Comodo from ZA.
I noticed repeated blocked connections in the firewall event viewer. Here are the 2 most consistent:

Application: windows operating system, protocol: udp, source ip: 11.24.0.1 port 67, destination: 255.255.255.255 port 68.

and

Application: windows operating system, protocol: icmp source ip: 10.170.160.1 type(3), destination: my ip code(13)

There are quiet a lot of this two. Are they supposed to be blocked or i’m doing something wrong?

I’m using windows xp sp2, and comodo 3. I’m not behind a router, connected to a modem on USB cable, there is another computer connected to the same modem but no home network between them.

My Comodo setting are safe mode in both, and in the stealth port wizard i chose block all incoming connections.

[attachment deleted by admin]

2

If you behind a hardware firewall which you are with you router you do not need those global rules cause your NAT covers incoming connections. The only global rule I have is the one that is there when you install Comodo for P2P. Anything Windows related should be outgoing only such as svchost or system.

3

You still need to create a trusted zone for your LAN

[ 0 ] Allow IP Out From IP Any To Zone [Local Area Network] Where Protocol Is Any
[ 1 ] Allow IP In From Zone [Local Area Network] To IP Any Where Protocol Is Any

Use the stealth wizard to define a trusted network

4

Thank you for your answers, i did what you said gibran.

The auto detect new private networks is checked, and there is already “local area network #1” behind the loopback one in my network zones, so i added the rules you said with this zone specified.

Hope i did right and thanks for your help.

5

The connections from 11.24.0.1 have stopped, but since i added the local area network rules my utorrent became non connectable… Which is weird cause i haven’t changed anything in the utorrent rules. I can download, but barely upload and my status changes between red icon to yellow triangle, while before i always had the green one. And checking the peers list in the torrent site show me as no connectable.

I even tried to move the utorrent rule ahead of the all other rules but it didn’t change much.

I’m not sure if my local area network in comodo is configured properly, it shows 192.x.x.x ip while i’m not behind a router. When i click on local area connection in windows panel i get regular ip (not starting with 192).

So my question is what should i fill in this screen if any?

Thanks.

[attachment deleted by admin]

6

The trusted lan rules are ALLOW rules so they don’t block anything.
The purpose of trusted LAN rules was to allow your lan traffic that could have been blocked by your last global rule.

7

I know it doesn’t make much sense, but utorrent isn’t acting properly now.

For my question is local area network zone should be 192.x.x.x/255.255.255.0 or my real ip/255.255.255.0? Or something else altogether?..

8

If you don’t post at least the first two octets of your IP how anyone could be supposed to guess?

9
What do the Network Status lights mean?

The green light means all is OK (ports are forwarded and you are receiving incoming connections)
The yellow light means that you have no current incoming connections. If this never turns green, this means that your port is not forwarded. The best way to check is with the µTorrent port checker, found in the Speed Guide. If the port checker says your port is open, then everything is most likely fine.
The red light means that µTorrent was unable to bind a listening socket. Most likely, this means a firewall is blocking it. It’s also possible that another torrent client is using this port, which will require you to change ports, or not run both clients at the same time.

[attachment deleted by admin]

10

I deleted the local area network rules and utorrent is seeding again.

I wish Comodo would have added some rules automatically like ZA do when you use it for the first time. What is Comodo equivalent of this screen in ZA? Can Comodo automatically figure out my internet adapter subnet or it’s not needed in Comodo?

This capture is from the internet as i don’t have ZA installed on my computer anymore.

[attachment deleted by admin]

11

Yes it does.

Anyway as far I can understand from your posts CFP doesn’t work as it is supposed to do on your setup.

I was and I am unable to help :-[

12

Have you read the uTorrent thread. uTorrent needs to have your hardware firewall port forwarded. Sure you do not have a hardware firewall?

https://forums.comodo.com/frequently_asked_questions_faq_for_comodo_firewall/tutorial_for_utorrent_with_comodo_firewall_3-t15677.0.html

13

gibran how can i make Comodo to add my correct local area network rules? Or i’ll have to add them manually but i don’t know which parameters to add in the screen i added here https://forums.comodo.com/help_for_v3/are_this_connections_need_to_be_blocked-t25989.0.html;msg188176#msg188176

Yes i used Ragwing’s option 1 and it worked ok till i added the local area rules. I’m not behind a router and i don’t have hardware firewall. Besides utorrent never gave me problems before.