Comodo affecting internet connection

Help for v2
1

I think my issue is with the configuration of the firewall. I have a few things going on that I need some advice with. Firstly, my internet connection keeps dropping to a “limited connectivety” message. I can restore this by turning off the firewall and within 30 seconds connection is resumed or, on other occasions when that does not work, I have to run XP connection diagnostics. After running this I’m often informed I have a winsock error which XP repairs and then the connection will work for a while before dropping out and I have to repeat. The other error messages I get is that connection can be made via http, https, but not FTS. I get a message to contact the manufacture of the operating system and find the port number that FTS connects through. I’ve included the log from window XP connection diagnostic tool at the end of this which indicates the above.

I use a wireless modem without a router through a co called Unwired in Australia. I also work for this company but in Accounts so essentially I’m gathering some tech advice from you guys and am also talking to the tech support people here. Unwired use a protocol called a Venturi Optimizer which assists the speed of connecting. It appears if I have the firewall running, Venturi drops out as I don’t think it can make a connection through my firewall. I know this, as if I turn my firewall off, Venturi appears up and running and things load at normal speed. If I turn the firewall off, Venturi will stay operational for a few minutes before dropping off.

The other thing is I have trouble updating Spybot S&D, Spyware Dr and Ad_Aware. I have to turn off the firewall to allow these programs to access the updates. If I don’t then a message will come up that I could not connect to the server. There is also a diagnostic log from a program Venturi uses which shows that I can not connect to a DNS server. I have not included the log that states that but easily could in my next note. I have put unwired in the “trusted zone” thinking that this might help. Any advice welcome.

Philip

Last diagnostic run time: 05/08/07 17:44:18
HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn FTP (Passive): Error 12015 connecting to ftp.microsoft.com: The login request was denied
info HTTP: Successfully connected to www.microsoft.com.
warn FTP (Active): Error 12015 connecting to ftp.microsoft.com: The login request was denied
info HTTPS: Successfully connected to www.microsoft.com.
error Could not make an FTP connection.
info Redirecting user to support call

DNS Client Diagnostic
DNS - Not a home user scenario

info Using Web Proxy: no
info Resolving name ok for (www.microsoft.com): yes

No DNS servers

DNS failure

Gateway Diagnostic
Gateway

info The following proxy configuration is being used by IE: Automatically Detect Settings:Enabled Automatic Configuration Script: Proxy Server: Proxy Bypass list:
info Could not get proxy settings via the Automatic Proxy Configuration mechanism
info This computer has the following default gateway entry(ies): 125.63.160.1
info This computer has the following IP address(es): 125.63.160.205
info The default gateway is in the same subnet as this computer
info The default gateway entry is a valid unicast address
info The default gateway address was resolved via ARP in 1 try(ies)
info The default gateway was reached via ICMP Ping in 1 try(ies)
info TCP port 80 on host 207.46.19.254 was successfully reached
info The Internet host www.microsoft.com was successfully reached
info The default gateway is OK

IP Layer Diagnostic
Corrupted IP routing table

info The default route is valid
info The loopback route is valid
info The local host route is valid
info The local subnet route is valid

Invalid ARP cache entries

action The ARP cache has been flushed

IP Configuration Diagnostic
Invalid IP address

info AutoNet address detected: 169.254.0.3
action Automated repair: Renew IP address
action Releasing the current IP address…
action Successfully released the current IP address
action Renewing the IP address…
action Successfully renewed the current IP address
info Valid IP address detected: 125.63.160.205

Wireless Diagnostic
Wireless - Service disabled

Wireless - User SSID

Wireless - First time setup

Wireless - Radio off

Wireless - Out of range

Wireless - Hardware issue

Wireless - Novice user

Wireless - Ad-hoc network

Wireless - Less preferred

Wireless - 802.1x enabled

Wireless - Configuration mismatch

Wireless - Low SNR

WinSock Diagnostic
WinSock status

info All base service provider entries are present in the Winsock catalog.
info The Winsock Service provider chains are valid.
info Provider entry MSAFD Tcpip [TCP/IP] passed the loopback communication test.
info Provider entry MSAFD Tcpip [UDP/IP] passed the loopback communication test.
info Provider entry RSVP UDP Service Provider passed the loopback communication test.
info Provider entry RSVP TCP Service Provider passed the loopback communication test.
info Connectivity is valid for all Winsock service providers.

Network Adapter Diagnostic
Network location detection

info Using home Internet connection

Network adapter identification

info Network connection: Name=Local Area Connection 5, Device=ADMtek AN983 10/100 PCI Adapter, MediaType=LAN, SubMediaType=LAN
info Ethernet connection selected

Network adapter status

info Network connection status: Connected

HTTP, HTTPS, FTP Diagnostic
HTTP, HTTPS, FTP connectivity

warn HTTP: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved
warn HTTP: Error 12007 connecting to www.hotmail.com: The server name or address could not be resolved
warn HTTPS: Error 12007 connecting to www.microsoft.com: The server name or address could not be resolved
warn HTTPS: Error 12007 connecting to www.passport.net: The server name or address could not be resolved
warn FTP (Passive): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved
warn FTP (Active): Error 12007 connecting to ftp.microsoft.com: The server name or address could not be resolved
error Could not make an HTTP connection.
error Could not make an HTTPS connection.
error Could not make an FTP connection.

2

G’day,

Can you please post a maximized screenshot of your Network Monitor rules? An extract of the firewall logs too, if possible.

I tried to have a look at the technical section on the Unwired web site but it’s so slow I gave up. I hope your access is quicker. :wink:

Cheers,
Ewen :slight_smile:

3

Hi Ewen,

Thanks for your prompt reply. I know this is a top class product and I’m sure it’s config issues. Can you tell me how I generate these screen shots? I’ve seen other people use them. Now when you say an extract of the logs; do you mean those that are capturing what the application and component monitors are doing?

In regard to this; I’ve been studying those logs and looking at what’s being denied. I’ve responded by placing the application and parent as allowed, when I can see a known trusted application being denied. Not much has helped though.

At the moment I cannot get to any web site whatsoever except by completely turning the firewall off. I don’t know exactly what sort of tech stuff you were looking for on the unwired site. Perhaps, if needed, you could tell me the sort of tech info that may be helpfull.

Appreciate your help.

Phillip

4

Hey Phil,

If you open CFP and click on ACTIVITY - LOGS and then do a right click in the logs window, you can export the logs to a HTML file. This can then be zipped and added as an attachment to a forum post. “Attach” is found when you click the RED “Additional options” link under the text entry window. Also, make sure that “Log events from …” includes all CFP modules.

Before doing this, however, can you do a right click in the logs window and select “Clear all logs”. With the logs cleared, reboot your PC and then connect to the internet. Leave it connected until it disconnects you. Set the firewall to “Allow all” so that you can renew or repair the connection and then connect to the internet again (after setting the firewall back to “Custom”). Once you have connected for a second time, go back to the logs window and export the logs as HTML. Now you can zip the HTML file and attach it to your reply.

This might seem the log way around, but we are capturing the events involved in connecting, having the connection broken and the status once reconnected.

It’s interesting that an address in the 169.254 range showed in your prior post. This address range is used by XP when it cannot allocate an address to an active adaptor, so it applies this as a “holding” address to preserve the stack. This might have a bearing on the problem.

I’ll be online for a while tonight (prob. about 2 hours or so), so I’ll keep checking for a reply.

Cheers,
Ewen :slight_smile:

5

HI Ewan

The logs and screen shot.

Thanks Phillip

[attachment deleted by admin]

6

Ewan,

Sorry. I was busy loading this stuff and hit send before I properly reviewed your instructions. I will get back to you with the logs how you’ve stated. The screen shot should be ok. I certainly appreciated your input here and I’m interested in youre comment about the unusual IP address.

Will be back with the proper logs soon.

Thanks

Phillip

7

Hey Phil,

I gotta turn in - I’m beat and I’ve got a big day in front of me tomorrow. I’ll check from work then and see what I can nut out.

Are you dealing with the one guy in Unwired’s tech support? If so, would he be willing to play email tag with me?

I’ve also PM’d you.

Cheers,
Ewen :slight_smile: zzzzzzzz …

8

Sure Ewan,

I can certainly find someone in tech who know what the’re talking about to help. As well as working for Unwired, I’m also a customer. I’ve included the logs to the best that can be obtained. My connection still gets a winsock error occassionally and then I do the subsequent repair, but mainly I cannot get a connection to anything with firewall on. So the log shows; connection attempt firewall on which failed, attempt off sucessfull, then after few minutes firewall back on and connection failed.

Appreciate the help and will be back with some contact from Unwired to pitch in here. Thanks.

Phillip

[attachment deleted by admin]

9

Hey Phil,

Got your logs - I’ll go through them today sometime. This may help with a couple of others posts that are sorta similar.

Cheers,
Ewen :slight_smile:

10

Hi Ewan,

Ok. I lined up the guy who is a head techie with Unwired and I’m going to send him this thread so he can see what’s gone on. I can provide you an email if you’de like to pose some questions.

Thanks

Phillip

11

Sorry Phil, I’ve been flat out all day and night. I’ll try to get back onto it tomorrow.

Ewen :slight_smile:

12

Hi Ewan,

I know by the amount of posts you do here that you are a very productive guy Ewan but please don’t forget me here. I can only access sites with the firewall off so I’m not too keen on doing much work on my pc until I can get Comdodo to do it’s thing. Looking forward to your next reply and I have asked Richard the tech dude to help us out too. Have confirmed he has received your mail.

Thanks

Phillip

13

Hey Phil,

Not forgetting you, I’m just waiting for Richard to reply. I’ve PM’d you with some settings to change while we’re waiting.

Cheers,
Ewen :slight_smile: