Hi!
I don’t know what to do anymore. I have switched off ALL automatics for file identifications in Comodo and I have deleted all vendor and file lists and set al so, that no automated file rating should be done, but it keeps adding all windows processes (an all Comodo processes) automatically to “trusted” and let all pass the internet. This all tested on 2 different computers.
It looks like the Firewall does not work at all!
What must I set that this does not happen?
Thanks
Thunder
Deleting Vendor and File lists does not automatically make them untrusted and stop them / or have them warn on running
If you don’t want essential Windows and Comodo processes to run, what is your goal in all this?
Thunderstruck…Change the HIPS setting to Paranoid mode.
Hi,
Thank you, but:
Deleting Vendor and File lists does not automatically make them untrusted and stop them / or have them warn on running
a) We know. It does not work anymore (in earlier versions it did work as you surely know)
b) We don’t want to stop processes, but want to stop them accessing the internet. This is the main job of a firewall.
If you don’t want essential Windows and Comodo processes to run, what is your goal in all this?
I want them to run (see above).
Thunderstruck…Change the HIPS setting to Paranoid mode.
HIPS is not the right function here.
I only need the firewall which allows only the user(!) definied processes accessing the internet.
That means we try to set Comodo as it was some years ago.
Comodo is not allowed to decide which process accesses the internet for this test.
So the question is: What must be set, that it does block (for example) Windows processes?
Or in other words: What must be set that the trusted verndor list REMAINS empty?
→ Please stick to that questions only.
If this very simple blocking test fails, Comodo is not a firewall, but a trojan which allows unwanted processes accessing the internet. It would get 0 points for “function” in the study about firewalls I’m writing on.
Hope you can help.
Thunder
ALL Vendors in the list would have to be marked as Unrecognized. Simply deleting them does nothing except remove them from the list view and never has done
I can see this becoming a Catch22 situations, as if you do this with Windows and Comodo, nothing will be trusted to either start Windows and / or Comodo, to allow either to function correctly
Thunder - are you aware that the Firewall itself has 4 different setting levels?
I think what you are looking for is the Firewall setting called Custom Ruleset.
Hi,
Thanks again, but:
ALL Vendors in the list would have to be marked as Unrecognized.
You are in the wrong list. Read above: I meant the list “Trusted Vendors”. You mean the list “File List”.
All Vendors in the List “Trusted Vendors” have been deleted, since no vendor is trustful for that test. But Comodo keeps adding Microsoft and Comodo to that list by itself (rated by: “Comodo”). After that it adds the applications of these vendors to “Application rules” as a trusted application without asking the user and let them pass the internet. So, without any permission(!). How do we switch off that behavior?
All verndors in the list “File List” are set to “Unrecognized” by the way → does not make a change.
Simply deleting them does nothing except remove them from the list view and never has done
You are right, if you mean the “File List”. You are wrong if you mean the “Trusted Vendors” list. In earlier versions, after deleting the “Trusted Vendors” list it remained empty forever, and Comodo did what it should. Test it and you’ll see.
I can see this becoming a Catch22 situations, as if you do this with Windows and Comodo, nothing will be trusted to either start Windows and / or Comodo, to allow either to function correctly
No, I’m sorry, this is wrong, too. If you block the complete internet traffic or “pull the plug” Windows and Comodo keep on working perfectly. Test it!
But this is just one example → If Comodo adds ANY application without allowance of the user to access the internet, and this behavour also can not be switched off, the firewall is completely useless, sorry.
Thunder - are you aware that the Firewall itself has 4 different setting levels?
We only can see 4 settings but no “levels”. The settings we see are: “Block all”, “Custom Ruleset”, “Safe mode”, “Training Mode”. It is set to “Custom Ruleset”.
Thunder
Thunder - just curious, what version of Firewall are you using?
Hi,
Version which surely does not work: 12.1.0
Version which surely works perfectly: 8.2.0.4792 (This was our test years ago)
Note that with the latest version the offline installation does not work (First bug we found). The offline installation needs internet connection to get it installed. So an offline installation is not possible. We tested with Windows 7 to Windows 10. —> Please do not discuss this bug here → we found the thread where this bug was discussed and confirmed already.
Thunder
IF you mean 12.1.0.6914 - there were / are several bugs discovered in that version, which have been rectified in the current Beta 12.2.0.6938
The Custom Ruleset would be the correct one for your needs Firewall Settings
When set to Block on a Win10 system, everything is blocked as it should be including Comodo, on both external & internal networks
Hi,
I’ll answer ASAP. We have the problem that on all machines the online update does not work. “Error” is showing up inside Comodo when we ty to update.
We’ll do another oflline installation, if we find the offline installer for the latest version.
Can you tell us where to download?
Thanks you
Thunder
Hi,
We did not find the offline installer for the latest Comodo Firewall. So your Firewall got 0 point for the download and offline installation.
Your software also got 0 points for the online installer, since it came with too much unwanted software and started a virusscan after installing without allowance of the user.
After installing and updating to 12.1.0.6914 the software acted as described above: It does not work at all and let Windows and Comodo pass the internet, and there is nothing for the user to do against it. We tried all settings, nothing works. Even if we mark Comodo and Windows as untrusted, Comodo let it pass… I really can’t believe that, but it is definitely true. Try it and you will see.
We will not test this software anymore, since it is an absolutely useless, not working firewall.
Uninstallation also does not work. What else there is to say?
All the best
Thunder
Apparently you have a problem with this software. Maybe for example try the beta version that is available. In contrast, I don’t see any major problems with this software.
Hi,
No we don’t test beta versions. No not “I” have any problem with it (since I don’t use Comodo and I don’t use Windows), but you have. Have you tried to block Windows and Comodo from accessing the internet? Send a screenshot of your “files” list so that all can see that what you write is true.
Thunder
Delete the entire application rule set, switch the firewall into a custom rule set.
np.
With this setting, comodo will kill with questions whether it is a trusted application or not.
In addition, everything that goes through svchost is blocked.
Hi,
OK, we tried this, but it did not work. We will do tomorrow again. If it does not work we are sure your message is fake.
Thunder
We can confirm: your message is fake!
Comodo Firewall does not work!
Thunder
Maybe the software is too extensive.
If I set software untrusted, it will not start. I just tried. In HIPS (you do not use it) I can set a software that runs in a VPN, isolated or restricted. Then you can allow in the firewall rules, prohibit whether software should be blocked, allowed or asked. Comodo often asks me if I allow a software to connect to the Internet. The most important thing for me, however, is that I can work as an online banking (I mean sensible workings) and have had no problems with my bank account over the years. Comodo a Trojan ??? Comodo is the bodyguard for my PC. Hitman, malwarbytes, avira, avast - none of them has ever found a malicious program.
I have set svchost.exe to untrusted and can not start it. It can also be found in WOW64. Maybe it will be trusted there!
Maybe you rethink your test again, before you make it public. What you can say: Comodo isn’t an easy software (but practive-configuration could be a good choice).
If I set software untrusted, it will not start.
You do not understand! It is not interesting (or even wanted) to block an application from starting, but blocking it to access the internet. THIS (and nothing more) is the main feature of a firewall.
For example svchost: of course it should start. If you would not allow to start it, you will not be very happy with Windows.
Now tell me for a simple test: HOW do you set Comodo so, that all svchost processes are allowed to start and run and ALL svchost proceses are NOT allowed to access the internet?
If you post an answere here which works(!) then we will take it back what we have found out.
Thunder
I do understand what you mean. I’ve only written what comodo does when set to untrusted.
Now tell me for a simple test: HOW do you set Comodo so, that all svchost processes are allowed to start and run and ALL svchost proceses are NOT allowed to access the internet?
It is not relevant to me as far as comodo protects my computer and this does.
I also think that Microsoft/Windows isn’t a worse monster than many other software/companies if you fear MS could spy on your computer. On the other hand, it would be better to turn off the computer completely. I think I have good control over what my “PC” does.