Cloudflare Warp (Beta) firewall bypass

Comodo Internet Security - CIS Firewall Help - CIS
1

FYI:

If connected via Cloudflare Warp (Beta) all Firewall application blocking rules are ignored. However if I run another third party firewall then that firewall does filter connections and allow blocking.

So how to configure Comodo Firewall so that it works with Cloudflare Warp?

If anyone wants to test:

h**ps://1.1.1.1/beta/

2

here error, not running in my PC with windows seven…

3

Well as stated on the download page Cloudflare Warp only works with Windows 10 1909 or higher. 64bit only.

Thanks for trying.

4

Some clarification here:

Comodo Firewall only detects and filters Warp connection. All defined blocking rules for other processes are ignored.

Other programs can detect the active connections but Comodo Firewall just does not see them when Warp is active.

1915×1074 248 KB

5

Hi Callender,

You are using a VPN, Comodo Firewall Driver needs to be enabled in that network/tap adapter. Can you check if enabled?

Settings → Network & Internet → Change Adapter Option → R-Click Cloudflare Warp Adapter → Properties

If you cant find the Comodo Internet Security Firewall Driver in the list then try installing it.

Under Properties → Install → Service → Add → COMODO → COMODO Internet Security Firewall Driver → OK

6

Thanks. I checked that.

982×316 64.5 KB

1627×676 86.7 KB

There’s no networl adapter. It’s not a traditional VPN . It’s more like a private DNS Resolver.

https://blog.cloudflare.com/content/images/2019/09/image6.png

The thing is that if I use another Third Party portable firewall with Warp then that Firewall filters connections just fine.

7
The thing is that if I use another Third Party portable firewall with Warp then that Firewall filters connections just fine.
Care to name those? Does it use its own kernel mode driver like comodo or is it a just front end for controlling the windows filtering platform like simplewall? Warp seems to use [url=https://www.reqrypt.org/windivert.html]windivert[/url] which makes use of a kernel mode WFP callout driver, so I would be surprised if any firewall can do proper filtering seeing that the driver performs packet manipulation/redirection. Also was comodo firewall installed prior to install warp or was it installed after?
8

Comodo Firewall has been installed and used for years. So it was installed first.

Well I run Evorim free firewall when using Warp and let Comodo Firewall take care of things when I exit Warp.

Evorim doesn’t seem to install a driver. It runs an executable and a service.

Anyway here is Comodo Firewall rules for Ccleaner:

750×466 36.4 KB

When running WARP rules Comodo Firewall rules are ignored:

718×44 9.19 KB

That’s just one example.

However it’s possible to block when Warp is running using another firewall.

It’s all defined application rules that are ignored by Comodo Firewall and not just the example shown.

9

In addition I delete the blocking rule for ccleaner in the other firewall but left Comodo Firewall blocking rules for Ccleaner in place.

I connect via Warp and launch Ccleaner. I get this:

Connection is not blocked by Comodo Firewall but the other firewall alerts and offers to block.