Blocked Windows Operating System :(

Comodo Internet Security - CIS Firewall Help - CIS
#1

hi!
sorry for my english, i’m from germany.
my problem: comodo firewall blocks “Windows Operating System”. I know the source ip - it’s a server in the lan which distributes the windows updates to the clients. I configured a GLOBAL RULE in NETWORK SECURITY POLICIY which shpuld allow this server to do wht he wants to do. I thought GLOBAL RULSE are the first rules the firewall checks?!?
how should i configure the firewall to not block this “Windows Operating System” with source-ip xxx.xxx.xxx.xxx …??? in GLOBAL RULES or in APPLICATION RULES??? my problem is that there is no process/application named, like svchost.exe, only “Windows Operating System”?!?

help, I need somebody! help, not just anybody! help, you know i need someone, help! :slight_smile:

THANK YOU VERY MUCH!!!

#2

Can you show us a screenshot of your Global Rules?

#3

hi ericjh,
thx for your answer :wink:
here is the screenshot. hope you can tell me what’s wrong with my configuration…
THANK YOU!! :slight_smile:

[attachment deleted by admin]

#4

Hello Austin do you use P2p software?

#5

no. why do you ask??

#6

Because usually people report to us the same as you and most of them are using p2p software. It’s not bad, it’s just that comodo blocks unrequested connection attempts.

May you please post a screen shot of the addresses that are being blocked? You are quite safe to let us see these addresses.

#7

you can see the adresses in the screenshot…
red: 15.5.5.50 (in line one there is a adress-range from 15.5.5.30 to 15.5.5.50)
green: 15.5.10.10
blue: 15.5.255.255

both addresses (source+dest) are in the same subnet 15.5.0.0/16

THX :wink:

#8

Do you use ‘stealth port’ ?

If you do, turn it off.

Otherwise, more informations needed.
(your CIS setting, traffic logs etc)

#9

i dont use stealth port but i’ll try to define the blocked ip as a trusted network - if that doesnt work: how can i turn off the stealth port function?? in the global rules? if i klick the stealth ports wizard it doesnt show an option “TURN OFF” or something…