Blocking/Closing Ports

Comodo Internet Security - CIS Install / Setup / Configuration Help - CIS
#1

It appears someone is accessing my laptop remotely. I maintain all of our computers at home and our network which is wired and wi-fi mix.

My computer seems to be the only one affected. And to me that indicates that this is personal. The following ports are being accessed remotely:

990 ftps - ftp protocol, control over TLS/SSL
1025 NFS-or-LLS - LLS, NFS, or listener RFS remote_file_sharing
1026 LSA-or-nterm - nterm remote_login network_terminal
1027 LLS
1028 ms-lsa

These ports don’t show up on scan of the other computers network services only mine. I strongly suspect someone is accessing my hard drive remotely. Which would explain why when I’m using my web design or graphic design software they crash at random times with no apparent consistency.

How do I block these ports in CIS?

Kit

#2

I already answered this in a previous topic however I’ll give it in form of a video now: Block ports in Comodo Internet Security - YouTube

#3

I’m quite impressed that you answered this in a previous topic. However, I wasn’t a member of this forum back then. I was hoping for something printed instead of a video so that I could print it out for easier reference.

You see my memory isn’t as good as it used to be following the removal of a tennis ball sized brain tumour, so being able to print out out the information would have been easier for me. But I’ll give the video a shot.

If you could provide me with a link to your previous answer on this topic that would be of help.

Thank you

Kit

#4

No I mean it was in the previous topic we were talking in: https://forums.comodo.com/firewall-help-cis/question-about-ports-t102492.0.html (I’m guessing you missed it because the posts were moved to another area)

Here is the same but updated guide:

To block inbound traffic on ports 990 and 1025 to 1028 you can follow these steps:

[ol]- Open the main CIS window.

  • Click Tasks in the upper-right corner.
  • Expand Firewall Tasks.
  • Click Open Advanced Settings.
  • Click Portsets in the left menu of the new window.
  • Right-click anywhere in the list to the right and click Add | Alternatively click the arrow near the bottom and then click Add.
  • Name the new Portset something like: 990, 1025-1028

[li]Right-click anywhere in the list area below the name and then click Add

  • Tick A Single Port and give it the value 990
  • Click OK
  • Right-click anywhere in the list area below the name and then click Add
  • Tick A Port Range and give it the values 1025 - 1028
  • Click OK
    [/li]
  • Click OK to save the Portset.
  • Click Global Rules in the left menu.
  • Right-click anywhere in the list to the right and click Add | Alternatively click the arrow near the bottom and then click Add.
  • Use these settings for the rule:

[li]Action: Block

  • Protocol: TCP or UDP (Or just TCP or just UDP depending on your needs)
  • Direction: In
  • Description: I’d personally leave it blank.
  • Source Address: Type: Any Address
  • Destination Address: You can use “Any Address” but personally I use “MAC Address” and then type in my MAC Address.
  • Source Port: Type: Any
  • Destination Port: Type: A Set of Ports | Ports: 990, 1025-1028
    Then click OK.[/li]
  • Move the rule above any Allow rules in the Global Rules list.
  • Click OK and you should be done.[/ol]
#5

Many thanks for your help. I managed to follow the video, pausing it frequently to ‘action’ each step. But I got there thank you so much for your help :smiley:

Kit