Comodo Firewall block the Virtual Machine access

Comodo Internet Security - CIS Firewall Help - CIS
#1

Hi, I’ve been using the Comodo Firewall for almost two years and i’m very please with it!

These last days i’ve been working with pre-created virtual machines using VMWare player, now, the virtual machine can access the internet BUT i can’t access the machine from my computer when the virtual machine it’s configurated with the Bridged network adapter, BUT i can access from any other computer in the network! Is there any configuration for this? Also, who i can open ports in the firewall?

Regards David

#2

Which type of guest OS are you running, Windows, Linux, BSD?

#3

Hi!, I forgot to metion that the guest OS it’s Linux, a pre-build VM from turnkeylinux.org with the LAMP suite.

#4

Providing you’ve installed the LAMP appliance correctly, you should simply be able to access the control panel from a browser in the host.

The Control panel will, by default, have an address from your DHCP server, or you may have assigned one manually. In the browser enter the ip address of the LAMP server, which as far as I’m aware operates, by default, on port 80, so no special configuration will be needed.

If you wish to access the other control panels, for example PHPMyAdmin, you will need to allow whichever port was assigned, during installation of the appliance.

I’m guessing in the CIS firewall, you’ve either chosen the predefined web browser policy or you have a limited rule set. You will need to make changes, either within the LAMP environment or to the Application rules for your browser. I suggest deleting any rules you may have and add the rules you need manually.

After you’ve deleted the existing rules, launch the browser but don’t select the pre-defined web browser policy. You will probably receive a few alerts. Once they’ve finished, open the Comodo control panel and select Network Security policy/Application rules. Find the entry for your browser, and make the following changes.

The rules you will need are:

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - ANY
Source Port - ANY
Destination Port - 80

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - ANY
Source Port - ANY
Destination Port - 443

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - ANY
Source Port - ANY
Destination Port - 80

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - 127.0.0.1 (this is for loopback)
Source Port - ANY
Destination Port - ANY

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - (destination address of the LAMP server)
Source Port - ANY
Destination Port - (the port of PHPMyAdmin)

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - (destination address of the LAMP server)
Source Port - ANY
Destination Port - (the port of web shell)

Action - Allow
Protocol - TCP
Direction - OUT
Source Address - ANY
Destination Address - (destination address of the LAMP server)
Source Port - ANY
Destination Port - (the port of webmin)

If you use the browser for FTP you will also need rules for that, let me know.

If you use SSH/SFTP ypu will also need to allow TCP port 22 for whichever client you use.