CIS blocks access TotalCommander

Comodo Internet Security - CIS Firewall Help - CIS
1

4 version CIS blocks access TotalCommander on ftp. No messages are present, process hangs. In 3 versions all was normal.

2

If you are using Active FTP the data channel is now blocked by the Default Firewall rules of CIS v4.

Please configure your FTP client to use Passive/PASV instead of Active FTP.

Please read this for more details on Active v.s. Passive FTP here

It basically comes down to:
Active FTP Uses incoming traffic setup from the FTP Server TO you
Passive FTP will only need “outgoing” traffic only.

3

Thanks, work.
Whether there is a necessity to use Active FTP and how to set up Comodo-4 Active FTP for TC?

4

If you need Active FTP you have two choices.

  1. Run stealth ports wizard and chose “Alert for incoming connections”.
    This will reset your current Global rules of the firewall and allow Incoming traffic like on v3.x was the default

  2. Create an incoming rule that allows Active FTP from One or more FTP Servers.
    Go to Firewall → Advanced → Network Security Policy, switch to Global Rules tab and add the following.

Allow
TCP
IN
Source IP = IP of the FTP Server
Source Port = 20
Destination = Any
Destination port = Range 1023 - 65535

If you have more FTP servers that need active you can also create a group of server ip’s called a “Zone” you can then use this Zone on the Source IP Field of this rule.

Now you need to switch back to your Application rules tab and verify that your FTP program is set to Trusted Application.

Apply the new policy and it should work.

5

Has made as you have told. The result is not present.
Probably error in “Source IP = IP of the FTP Server”. How to define?
Tasted “loopback zone” and “local area network” zone, “Any”. Does not work.
TC is Trusted Application.

6

Sorry i forgot to mention this rule needs to be Above the Block IP Any Any rule.
Can you please verify that?

Also try to set Source = Any in this case, if it works you can always start to get to rule to be more restrictive…

7

Does not work.

8

I tried both setups, both work.

Best thing to do is set Total Commander to use Passive FTP.

Global:

Or per connection:

If that doesn’t work then you can stay on Active FTP but make sure your global rule is configured like this image here.
So same setup + location rule on top position number 1

Beware that this setup is less secure then the Passive version because this one allows incoming traffic to your system.

[attachment deleted by admin]

9

Hi, had the very same problem (my post):

  1. Run Stealth Port Wizard;
  2. Choose 2nd option;
    TC works as it should.