Comodo Firewall - Help for Users written by Users! Volume 1, 2, 3

Hi Guys

we want to start a new initiative to create a comprehensive document called

Comodo firewall for Dummies! and we need your help :slight_smile:

We want this document to be a comprehensive document about basics of firewall in general and lots of screenshots and easy to understand explanations.

Stage 1: Decide the content

Firewall Background

eg: What is a firewall
why do i need a firewall
Whats a software firewall and hardware firewall
Do i need a firewall if i have a router

Comodo Firewall Basics

etc etc etc.

Stage 2: Assign a topic to each volunteer (hoping there will be some (CNY) (CWY)) get an overall Project manager for this (again hoping that someone will volunteer :slight_smile: ).

We then all help deciding, with the guidance of our Project manager the first phase and come up with the content, then dish it out and get back the content for each topic and the Project manager puts it all together.

I am hoping at the end of this, we can create a document/book called “Comodo Firewall for Dummies” which could benefit everyone including not so dummies who wants a easy to read quick start up document :slight_smile:

thank you all and look forward to your participation…

Please respond to this by replying in the post and also suggesting topics we shoudl cover and topics you could help with pls.

thank you

(CLY)

Melih

Sounds like a Wiki in the making…

LM

I´d definatly like to help with this already started on some but mostly I´ve been waiting On V3 to finish

Melih has written some good stuff for some of these I d like to see his “The Importance of Layered Security” in there somewhere
eg: What is a firewall
why do i need a firewall
Whats a software firewall and hardware firewall
Do i need a firewall if i have a router

A good bit has been written you just have to find it and organize it and possibly make some modifications for V3

If V2.X is going to be updated. as I have read in some posts by Melih I would like to see a section for it also
OD

I’m would be interested in getting involved in this project, either in a writing capacity or, if no one else wants the position, Project Co-ordinator. Perhaps, even both :slight_smile:

Some ideas for sections:
Windows Services/components and how they relate to firewalls.
Essential Internet protocols (HTTP, HTTPS, FTP, POP, IMAP, SMTP, NNTP etc), what they are, how they’re used.
Vulnerabilities, what they are and how a firewall can help to protect (with examples).
A how and why, on creating custom rules.

Btw, is this going to focus on V3 only?

Toggie

I could help with something easy. Not too much technical for me, but I think I’ll be able to to something.

Cheers,
Ragwing

I guess I’m not techy enough by far, but I have a suggestion. Keep it in very very plain language (for dummies), and use a lot of similes, like: “A firewall is like a doorman”. I’ve been private teacher and the key is imagining oneself in the shoes of someone who knows nothing. :slight_smile:

I´d be willing to work with Toggie a Project Co-ordinator if hé’d like.

Thought about throwing my name in the hat last night but wanted to sleep on it

GT

I agree with Japo. Remember your target audience, and keep it simple. If it gets too techie the average computer user will not understand it, get confused, and stop reading (and stop using the firewall). Provide a philosophical section (like in Melih’s original post). Give information on what the different Comodo firewall settings do (with pictures). Let them know what the default settings are on installation. Give information on what to do (and not to do) during installation, including ■■■■-by-■■■■ instructions. Make sure the text is welcoming to the user. Make sure there is a clear path for help included. Give information on the different popup screens they will encounter (with pictures)–as in how to decide what is “good” and “bad,” and how to make the correct decisions on these popups. I witnessed a non-techie “freeze” when a Comodo firewall popup appeared right after installation. Some panic ensued, and the user checked “Block.” The popup was for allowing iexpore.exe. Of course, the user was confused as to why she could not get on the internet. With this in mind, maybe make the default time-out on the popups longer, to give a non-technical person more time to digest and deal with it.
This “Firewall for Dummies” is an excellent idea!

(:KWL)

I was talking w/ a technical writer today about what’s good, what’s bad. He indicated that the key thing is to write (in simple terms, no fancy words - whether technical or not) from the standpoint of tasks, rather than tools. In other words, imagine a specific goal, and explain from start to finish how to do it. Most software manuals simply explain what it can do, or what each “tool” within it does, rather than helping a user accomplish a task, and that’s where they go wrong.

There are (I think) excellent posts here about what firewalls are, why they’re needed, and so on. There are also some excellent tutorials that can probably be modified to be more user-friendly for this type of project. Such as, “How do I set up my firewall so it’s secure but I don’t have to worry about it all the time?”, “How do I get my p2p application to work?” “How do I set up a file server? …FTP server?.. Remote access? …Home network?” and so on. Think of things the different levels of user (focusing primarily on the average user) would want to do, and write a “How to” on that subject, with lots of pics and clear, step-by-step instructions.

LM

ok, Project Coordinator: Can you pls come up with the content list…

(yes first we need to decide Project Coordinator)… pls put your name forward for this and pls bear in mind that it will be a task that will require quite a bit of your time.

thanks
Melih

I would be willing to create a content list this weekend and should be able to post it in a couple days for review

I had PM’d Toggie about working him as Co-Project Managers. as my amount of available time might vary from week to week.

If he does not want to I would be willing to work on it.

OD

Excellent!
We will wait to hear from you guys as our Project Coordinators.

thank you very much indeed guys

Melih

I happy to work with Opus on this, might be easier with two of us to share the load :slight_smile:

I’ve put together a TOC template that I’ll post later today. I think it would be a good idea to have input from the community regarding the content of the book. Once we have a definitive TOC, we can start the process of creating the articles.

Couple of things crossed my mind. First, the name of the book, “Comodo Firewall For Dummies” as you all know there are a lot of books published under the ‘Dummies’ banner, do we need to be careful not to infringe any copyrights?

What format shall we use for the initial chapters, MS Word? Also will wee need to output the final document in a different format, PDF for example?

Toggie

Toggie
Some of my thoughts on the Contents

IF there is to be future Dev on CFP2.4 we should have some sections on the differences Or notes as to what applise to what i.e[this section applies 2.4 & 3.x] or [this section applies 3.X]

It should start out very basic as has been mentioned but I think there is room for more advance material toward the end ie Specific application configs.
I have experimented with some very restrictive rule sets
I saw some time delays with 2.4 and droped this method with this version
However I have seen no or little problems with 3.x at least with 3.0.9 and later

I will wait for you TOC and we will see where we go from there

I hav a wealth of srceenshots but from earlier betas I will start to go through these

I know I’m a bit late jumping in (and hey, first time poster too…) but here’s a Table of Contents, based on the ideas mentioned so far - especially the Tasks vs Tools principle hinted at by Little Mac. Consdering Toggie is also working on a ToC, perhaps he can merge the best ideas from his with this (although for some reason I expect there to be many similarities).

I’ve divided the book in three sections. The first covers basic concepts, not particularly related to Comodo sometimes. This way we can make some assumptions, like the user knowing that the internet consists of a bunch of computers talking together, in the chapters that follow. This section is somewhat tool-oriented… Second section contains Objectives - things the user wants to accomplish - this takes the Tools vs Tasks one step further… a user doesn’t say to himself ‘Gee. I really feel like adding a trusted application today!’ - he says to himself ‘I want my P2P client to work, so I can listen to an MP3 of Bach’s Brandenburg Concertos!’. The objectives lead to tasks - the assumption is made that if you explain a task, the user will be able to extrapolate from that task the steps required to perform similar tasks. The third section is more of a ‘lookup’ directory. It will duplicate some information from the second part, but offer it more in an application-manual style. This way, if you know what you’re looking for, you can cut right to the chase.

== SECTION ONE - PREPARING ==

  1. Introduction
    1.1 How this guide works
    1.2 Intended audience
    1.3 Shortcuts

  2. The Internet
    2.1 Connecting to the internet
    2.2 Security concerns
    2.3 Solutions

  3. A Very Shor History of Firewalls
    3.1 Dedicated hardware
    3.1.1 What about my router? (Note: chapter to explain relying on just a router is a Bad Idea)
    3.2 Software
    3.2.1 Advantages and Disadvantages to Software Firewalls
    3.2.2 Windows Firewall (Note: Get out the sledgehammer and let the bashing begin?)
    3.2.3 Types of Firewall (Note: Begin with simple IP blockers such as PeerGuardian on one end, end with CFP V3 at the other end of the spectrum)

== SECTION TWO - GETTING THINGS DONE ==

  1. Getting Started
    4.1 Choosing a firwall (Point out to users that there ARE actually alternatives to CPF, which might be more suitable for complete n00bs… don’t flame too much for saying that :wink: )
    4.2 Obtaining Comodo Firewall
    4.3 Installing
    4.4 What’s all this stuff you’re asking me?! (Explanation of the popup balloons, etc)
    4.5 Application Overview

  2. Getting an application to work
    5.1 Browsers
    5.2 Peer To Peer
    5.3 Chat applications
    5.4 Games
    // Note: Followed by other categories of applications

  3. Tightening up security
    6.1 Sealing off everything (Block All mode)
    6.2 Blocking a particular application
    6.3 Blocking a particular computer
    6.4 Choosing a security level

  4. Understanding Defense+
    7.1 Defense+ Events
    7.2 Choosing a response to a Defense+ Event
    7.3 Protecting your computer from attacks on the inside

  5. In case of problems
    8.1 Checking if Comodo Firewall Pro is the culprit
    8.2 Keeping Comodo Firewall Pro up to date
    8.3 Restoring a previous configuration (Note: Applies to v3, I believe)
    8.4 Getting help (Note: Explain about Comodo Community)
    8.5 Telling Comodo to fix itself
    8.6 Submitting files to Comodo

== SECTION THREE - Digging Deeper ==
9. Protected Areas (mostly further explanation of Defense+ I guess)
9.1 Network (Firewall)
9.2 Applications
9.2.1 Processes
9.2.2 Files
9.3 Operating System
9.3.1 Registry
9.3.2 Inter-application communication (COM interfaces)

  1. Defining policies
    10.1 Security Policy explained
    10.2 Policy Elements
    10.3 Creating your own policy elements
    10.3.1 Network rules
    10.3.2 Application rules

  2. Why Trust Comodo Firewall Pro?
    11.1 Comodo Company History
    11.2 Fullpage picture of Melih
    11.3 Random selection of Melih’s promotional posts here on the forum
    11.4 Innovations Comodo brought to the FW market (to establish image of cutting-edginess)

  3. … Out of ideas


Well… my arms are aching now from typing this up. Feel free to use it, discard it, change it, etc. Once this thing gets started, I’d be happy to contribute text to various chapters. I would strongly recommend focussing on V3 - that way, when V3 is done, perhaps Comodo will be able to ship this kind of document along with it. Also, while a Wiki is great for working on it, distributing documentation usually works best in a plain old PDF file (due to having it all together in a single, downloadable file) - I would urge you to use a Wiki instead of MS Word .doc (or any other file-based system) for working on it, though… especially with multiple contributors, such things get pretty messy pretty easily, due to people working on various parts at the same time.

Just my slightly-more-than-€0.02

–K

great start…

not sure about my full page picture, unless its invisible :slight_smile:

how can we teach concepts to users by using concepts they may be familiar with? Also what can we do to use very simple language?

Melih

Count me in guys.

Ewen :slight_smile:

I agree on the simple language point… but something like that is often easier said than done. Personally, the castle metaphor always sounded good to me.

Picture a medieval castle with a moat, drawbridge and guard: The idea is that a firewall begins by restricting all access (the moat) - nothing gets in, unless it goes through a port that is specifically opened (the drawbridge). As it passes through, information is inspected by a guard to check if it matches certain criteria. Questions the guard might ask are like: 'Do you have an appointment (destination port)? Where did you come from (source host)? What’s that weird string in your ICMP back-packet? (protocol analysis).

You could expand on that by explaining the castle is divided in various rooms (application’s allocated memory), with guards at the hallway making sure that anyone moving from room to room actually has business there (Defense+ COM Interfaces), or that ‘people’ (processes) in the rooms sometimes want to borrow stuff from other rooms (DLL hooks, or whatever that involves leveraging other apps). Special sections of the OS (registry, etc) can be special rooms such as a treasury, which is extra well-guarded.

Question is how far you should go with this, before the user can no longer relate the metaphor to the things he sees on the screen.

–K

If you hard working guys also put together a basic usage guide that will be reasonably in size and with screenshots, I can make an instruction video out of it. Not as comprehensive as the book you are putting together, but still something easy with the most important things in it so the user gets going…

I think “Comodo Firewall For Dummies” Could be asking for problems. Perhaps Jeremy has an opinoion on this I would talk to your legal Dept Melih.

How about something like “Comodo Firewal for the averge user (and beyond)” Other Ideas

I would like to see some other suggestions just to have on the table we do not need to decide yet.