CFP 3.0.11.246 RC1- Questions about how it works

[Opus_Dei]

These are some questions I put as part of bug report Has anyone played with the wild cards (?) & (*) yet??
for more details see the topic link below

Thanks
OD

@Opus Dei post:92

I imput this as “code” the BB code was changing my every 3 “?” marks to ???

3),4) & 5) really belong in "CFP 3.0.11.246 RC1- Questions about how it works"
3)  After bug 2 is fixed 
  would it be possible to add users using wild cards either ? or *
  for example 
  C:\Documents and Settings\*\Menú Inicio\Programas\Inicio\*
  or this
  C:\Documents and Settings\??????????????\Menú Inicio\Programas\Inicio\*

4)  Clarification
  What is the difference in the wild cards(*) & (?) 
  my guess is that 
   4A)  (*) Represents a complete file name or directory tree and must be used 
      at the end 
      i.e  %windir%\system32\GroupPolicy\User\Scripts\Logon\*
   4B)  (?) represents an individual character and there must exist a ? wildcard
      for each charcter 
      i.e in %windir%\system32\GroupPolicy\User\Scripts\Logon\* user would need 
      to be represented using 4 wildcards ????) like this
      %windir%\system32\GroupPolicy\????\Scripts\Logon\*

5)  More claification 
  Can the wild cards be combined as in 4B)
  %windir%\system32\GroupPolicy\????\Scripts\Logon\*

Thanks in advance
OD

[gibran]

@Opus Dei post:121

These are some questions I put as part of bug report Has anyone played with the wild cards (?) & (*) yet??
for more details see the topic link below

Thanks
OD

I think C:\Documents and Settings*\Menú Inicio\Programas\Inicio* should already work.
I’ve not tested more than one ? as I usually use * for this. It should work, hey, maybe it could be used to workaround the multiple progra~? issue
but I cannot test this as I no longer have this issue.

[Searinox]

@Opus Dei post:120

It will pass v3 if you do not always allow when prompted

In the thread below Soya mentions Melih says they will be fixed in V3
And in the post below I tested an early version of v3 it passed
matousec said in their methodology for this test when given the option “Allow” or “Deny” they always select "Allow.
If a users always "Allow"s at any prompt by a fire wall I think there is little possibility of passing a leak test.

This is not standard methodology even for matousec

Hope this helps
OD

That’s what I meant, Iwasn’t referring to Ragwing’s post but to the one where Melih says they’ll be fixed.

[chesterns]

Hello,

I am unable to put my WAMP server online on my Vista machine when Comodo Firewall 3 RC1 is running. If I close comodo, it runs okay. I’m in Safe Mode - Learning, and don’t get any prompts to allow/deny, and I have manually added the application file and services to the trusted applications list and still no love.

intel core 2 duo, vista 32 bit, nod32 antivirus, latest version of WAMP.

Thanks,
Ben

[Searinox]

http://www.matousec.com/projects/windows-personal-firewall-analysis/Comodo-Personal-Firewall-2.3.6.81/

Click on “show bugs”. There’s lots of criticals, can someone tell me how many of those are fixed in v3?

[Melih]

@Searinox post:125

http://www.matousec.com/projects/windows-personal-firewall-analysis/Comodo-Personal-Firewall-2.3.6.81/

Click on “show bugs”. There’s lots of criticals, can someone tell me how many of those are fixed in v3?

there shouldn’t be a critical bug left in v3

Melih

[Searinox]

@Melih post:126

there shouldn’t be a critical bug left in v3

Melih

Wow… coming like that from the admin it sounds pretty reassuring. I didn’t know so much attention had been payed to securing the design of the firewall. I guess there’s more changes under the hood than just a new interface and extra features eh? Neat.

[adric]

Can anyone explain when and what determines if new files are added to the ‘My Pending Files’ list?

I have seen files such as *.dll, *.sys and *.exe and I assume there are more, but I have
not noticed others so far. Files considered safe by CFP do not get added which is what I expect.

I have seen files with and without digital signatures added to the list. I do not understand why files with valid digital signatures are placed there. New *.msi files do not get added even though they are unknown to Comodo. There are other extensions too that are not added. How does ‘My Trusted Software Vendors’ fit into the picture?

Can we expect any documentation on this kind of stuff or is it up to us to figure it out? >:(

It would have been nice if Comodo had released a document for the BETA testers about how CFP is supposed to function etc. I for one would find it easier to test with a bit of documentation. Another benefit of this would be a lot less forum clutter from those of us that RTFM.

Al

[gibran]

@adric post:128

Can anyone explain when and what determines if new files are added to the ‘My Pending Files’ list?

I have seen files such as *.dll, *.sys and *.exe and I assume there are more, but I have
not noticed others so far. Files considered safe by CFP do not get added which is what I expect.

I have seen files with and without digital signatures added to the list. I do not understand why files with valid digital signatures are placed there. New *.msi files do not get added even though they are unknown to Comodo. There are other extensions too that are not added. How does ‘My Trusted Software Vendors’ fit into the picture?

Can we expect any documentation on this kind of stuff or is it up to us to figure it out? >:(

It would have been nice if Comodo had released a document for the BETA testers about how CFP is supposed to function etc. I for one would find it easier to test with a bit of documentation. Another benefit of this would be a lot less forum clutter from those of us that RTFM.

Al

It’s only a about time and a help file will come. I guess that the last RC should have that.

From what I’ve tested and read in the beta section My pending list should be able to report changes to protected file extension so it should monitor the executables list in My Protected Files.
My pending list is a place to have an overall view of files/folders changes (this is important too as there is no hash checking) plus it has the ability to disable autolearning for files in the list.
This way you can override autolearning as long as there is no rule for an executable.
So if you wish to disable autolearning for few files you can add those to My pending list.

I guess that one useful addition could be enabling groups in My pending list in order to separate the files you add from the ones added by V3.

[kail]

@Searinox post:127

Wow… coming like that from the admin it sounds pretty reassuring. I didn’t know so much attention had been payed to securing the design of the firewall. I guess there’s more changes under the hood than just a new interface and extra features eh? Neat.

It’s better than that Searinox, Melih isn’t really just an Admin… he’s the CEO of Comodo.

[Opus_Dei]

Not only that he seems to be a pretty nice guy with a good business model (R)

but I bet Melih can be a bear as release dates approach
Egemen would know better than the rest of us.

Again don’t let it go to your head Melih

OD

@kail post:130

It’s better than that Searinox, Melih isn’t really just an Admin… he’s the CEO of Comodo.

[Trel]

2 quick questions

1. Is there any option to have “Remember this answer” unchecked by default on all alerts?
2. Is there any way to clear unremembered blocks or allows without rebooting?

[Ragwing]

@Trel post:132

1. Is there any option to have “Remember this answer” unchecked by default on all alerts?

Don’t think there is, it’ll go after what you selected on the last alert. If you uncheck “Remember this answer” on alert 1, it’ll be unchecked on alert 2, same if you choose “Remember this answer”.

@Trel post:132

2. Is there any way to clear unremembered blocks or allows without rebooting?

I didn’t quite understand, but I think you meant how to generate a new alert for an application that you’ve (temporary) denied/allowed to something and want to change the permission?
If that’s the case, restarting the program will give you a new alert. For example, if you’ve blocked explorer.exe to run mspaint.exe, you’ll need to restart explorer.exe before you’ll get a new alert for mspaint.exe.

Cheers,
Ragwing

[system]

Is there anymore skins or do we have to create our own?

[Ragwing]

Greetings!

@Melih

we are building a translation/skin tool. should be available sometime after the realease.

Melih

According to that, it sounds like they’re working on the skin tool, so I guess there’s no skins avaliable at the moment, but I think there’s going to be a sub-forum for CFP3 where users can upload their own skins. It’ll possible be some skins avaliable for download from Comodo’s website.

Cheers,
Ragwing

[system]

Thanks’’ :■■■■

[Ragwing]

No problem

Cheers,
Ragwing

[AOwL]

It will be fun to change the appearance of CFP 3
Not that I dislike the look of the firewall now, but it’s always nice to be able to choose/make a skin that you like.

[system]

A question about Installation Mode.

When I didn’t have this setting turned on, Windows updates, and applications (and files in them) I installed were popping up! like 50 pop ups for itunes and AVG… even more!

Does Installation Mode help fix this little annoying matter? I’m also getting a Reminder to REVERT back to previous setting.

Thanks…

Josh.

[gibran]

@Josh123 post:139

A question about Installation Mode.

When I didn’t have this setting turned on, Windows updates, and applications (and files in them) I installed were popping up! like 50 pop ups for itunes and AVG… even more!

Does Installation Mode help fix this little annoying matter? I’m also getting a Reminder to REVERT back to previous setting.

Thanks…

Josh.

You have to select the installer policy on the 2nd popup after the one that ask permission to run. That will disable popups.
Then you have to examine your pending file list and move all harmless files to your Safe list.