I’ve got the current version of CPF (22.214.171.124 installed with Network Magic on two PCs that I’m trying to network. I cannot access the shareholder folders or printers.
I’ve set up IP ranges on both PCs for the network, but no luck. If I set the firewall to allow all, then I can I access everything, but that setting defeats the purpose of having a firewall. Any suggestions or hints?
Welcome to the forum.
Have you made a “new and trusted network” in security/tasks?
I thought I had, but I’m not a home to double-check. I know that I did set up an IP range based on what was suggested in the Network Magic manual and what my router software provided.
I’ve got a third PC with McAfee set up. Using that laptop, I can access shared files on the desktop, which has Comodo installed (McAfee is only on the laptop.) However, I cannot access the laptop’s files from the desktop.
In looking at the log, I see Network Monitor, Inbound Policy Violations. A typical one is:
Description: Inbound Policy Violation (Access Denied, IP=192.168.1.67, Port = https(443))
Protocol: TCP Incoming
TCP Flags: SYN
The IP addresses are for the network. I have set up the network as a trusted zone on the desktop.
Any ideas on how to fix this?
Is 192.168.1.68 the laptop?
Are you sure you have set up McAfee correct?
Can you try to turn it off on the laptop?
Network Magic is programmed to configure McAfee and several other commercial firewall products. Prior to installing Comodo, the network worked fine (I had McAfee on the laptop and Symantec on the desktop). After I removed symantec and installed Comodo is when the problems started happening, so I don’t think the issue is with McAfee.
Are you certain that there are no remnants of the Symantec firewall… services, drivers, registry entries, etc?
For the Activity Log violation alert, the log entry should show which Network Rule is being fired for the block, but you haven’t included that with your post. Will you look at the details of the log entry, and post the Rule Position/ID that’s blocking?
Also, the rules you’ve added in the Network Monitor for your LAN (which should be two rules, one In, one Out) - are they above the bottom Block rule?
I found a couple of symantec folders left and deleted them. But I still can’t access shared folders on other computers.
The network rules that is being given as a reason is Network Control ID=16.
Regarding the Network Control Rules:
The third and fourth rules are "ALL IP IN (OUT) FROM IP ZONE [Intel(R) PRO/100 VE Network Connection - Packet Scheduler Miniport] - 192.168.10 / 192.168.1.255 to IP [Any] WHERE IPPROTO IS ANY
The very last rule is "Block and LOG IN or OUT FROM IP [Any] TO IP [Any] WHERE IPROTO IS [Any]
Sounds like you have a large amount of Rules in your Network Monitor.
If Rule ID 16 is that final block rule, then the reason it’s being blocked is because it has been allowed prior to that point (the rules filter from the top…).
If you would capture a screenshot of your Network Monitor’s rules, and attach to your post, that would really help us see what’s going on. Be sure to edit any personal info (IPs, etc) that you don’t want appearing on the web.
If you can’t get it to work, you should start from the beginning…
I think that there is a cleaning tool for getting rid of Symantec completely.
You might find it on their website. Use that tool.
Then you should uninstall CFP, reboot.
Clean the registry and everything else you find with Comodo.
Install CFP and choose “auto” at install. Reboot.
Now, scan for known apps. restart the firewall
Make a trusted zone. Reboot.
Now you can try to make a network that works…
This is the easiest way for us to help you, if we know that you have the default settings.
You can see it in my video guide… https://forums.comodo.com/index.php/topic,4766.0.html
I uninstalled CFP, then I downloaded and ran CCleaner.
Rebooted, then downloaded and installed a clean copy of CFP.
Followed your instructions on the scan for trusted applications (something I didn’t do the first time) and then hit defined a new trusted zone.
Knock on wood, everything seems to be working… :BNC
One question, CFP still seems to be flashing quite a few alerts. Too early to tell if as many as the first time, but still alot. Is this pretty common even after scanning for trusted applications and does the number of alerts drop after the first week or so?
Good, I’m glad to hear it’s working better than Round 1. We’ll keep the fingers crossed…
Yeah, it’s not uncommon to get a fair amount of alerts at first. You can reduce that some by going to Security/Advanced/Miscellaneous and moving the Alert Frequency slider to Low (if it’s on anything higher than that); by default it may already be there, though. Also, in that same section, make sure the box is checked for “Do not show alerts for applications certified by Comodo.” At any rate, yes, it’ll taper off after a couple days of use, if you access most of your regular programs.
Be sure to keep us posted, on how this issue works out…