Okay, I disabled CAVS ON-Access scanner, and set cavasm.sys to Manual instead of Auto. Reinstalled, no problems with CFP this time.
Defense + did a couple strange things, though. Set two programs as Trusted Apps & Remember on first popup. Then those same applications called other applications in their group, etc, and I got more popups. On these subsequent popups, the Trusted Apps option was not accessible; I could only Allow & Remember. When I went into D+ Policy, I saw these apps were all set as Custom instead of Trusted. Manually changed that; seems okay since.
CAVS, on the other hand, cannot run the On-Access scanner; it will not start. I restarted the driver (cavasm.sys), and attempted to enable On-Access. It errors out (003, of course). Before you wonder why I’m crazy enough to turn it back on after the last round of BSOD, it’s simply for testing. I wanted to see if it would work or not, if started manually after the fact. It’s not just that I’m a glutton for punishment. IMO, Beta & Alpha or not, CFP & CAVS should work together seemlessly; I had no troubles with the last Alpha, so apparently something changed in this one…
LM
PS: I notice that double-clicking systray icon opens the GUI every time; I no longer have to context menu/open, to get it the first time. Tnx.
I agree with Jasper on these, sound like good ideas.
OD
PS I have Mac filtering working (at least out)and could not get it to work on 1.0…
Hope to get zones working could not get those working on 1.0… either
External Log Viewer (More button). I get the empty error from the External Log Viewer if I use the More button to run it or run it directly. A possible reason is that the Log has not been cleared by the uninstall/install… it still contains the Alpha 1 entries. There could be a format change issue there.
Both Log viewers are slow to load. The Internal Viewer is faster than the External. But, both have improved (in speed) since Alpha 1. Another possible reason for this is that the Log has not been cleared between Alpha & contains a vast amount of entries. CFP 3 seems fairly verbose in comparison to CFP 2.4.
Vlad: Sorry, I’ve not seen the other stuff.
OD: I am able to modify the Defense+ rule for MSIE… although I do have to click 3 different Apply buttons to save it. But… then again… DNS Client? Most users use external DN Servers for their resolves. The absence of the DNS Client Service (ie. stopped or disabled) does not mean that you cannot perform DNS resolves.
czantra: I agree with you on the Less/Fewer wording.
Jasper: Log Viewer… maybe not needed. CFP 3 has an External Log Viewer (\Comodo\Firewall\cfplogvw.exe) use that via a shortcut. In fact, CFP doesn’t even need to be running to use the External Log Viewer.
Defense+/Advanced/Computer security policy - do not remember the entrys after reboot
If as example my browser cant connect or resolve dns, so why there are no log entrys about that ?? (it do not log whats the reason or even that something is blocked, no matter how i set it up)
The Alpha 1 also lost its registry entries, sometimes some of them, other times all of it. I’ve not experienced any losses with CFP 3.0.2.5 Alpha yet. But, for Alpha 1… I did find it very useful to occasionally export the registry path HKLM\SYSTEM\Software\Comodo\Firewall Pro and then restore CFP by importing. When I realised that a loss had happened (and not wanting to spend all that time teaching CFP again), I would exit CFP. Import the CFP REG file, restart CFP & all sorted. Worked every time.
Good suggestion Kail. I made me a shortcut to the external log(didn’t think of that) but a user shouldn’t have to make shortcuts by using .exe files from the program folder. Will work for now but if all of the different logs were accessible from the systray menu that would be so convenient. In fact, just put all of the shortcuts from the main firewall program windows on a right-click menu in the systray. Now that’s a way out idea but it would sure be different than anything out there. ;D
Would also like to see popup alerts for any incoming traffic that gets blocked in the log. Either I haven’t messed with it enough to get that working or that functionality isn’t built in.
Completely broken in it’s latest incarnation. Some of the same difficulties as CZantra but more extensive. Windows Vista Business:
Creates no rules in the Policies dialog. NONE
Log not updated.
Entries that did make it into the log had completely screwy timestamps (ex: 3:8 for 4:20am)
No global rules were effective
Some programs would bring up firewall prompts, others nothing. Even with the paranoid setting (Custom with High Alert level) This is the one us control freaks are most interested in, btw.
Opening the log while viewing active connections causes a crash
A few other, though minor, issues. Uninstalled and am preparing to reinstall the second alpha release (3.0.1.1) to see if problems continue. If so, much of this may be due to an incomplete removal before installation of alpha3.
Anti-Virus: AVG, internal network behind NAT
Edit: This edit has been brought to you by the letters ‘s’ and ‘d’
Your right Kail
Stopped the service no problem browsing
Sorry I misread apparently it only helps cache DNS entries
I don´t know why they even worried about this in Isolated Browser Application but then again Oviously I am no expert
Exactly the same problem (see below). Loads fine if the CAVS service is disabled (via safe mode) but if the service is re-enabled again (after normal logon), then BSOD :(. Previous version worked fine for me but not this one
… plus I installed it on the work laptop ;). Funny thing is, I cloned the system on the first release in the event of a BSOD. Having read Melih’s comments about CFP3 crashing less, I just went ahead and installed this time then … BSOD :o. Oh well, back to 2.4 for the time being.
Vista Business - 32bit.
I installed 3.0.2.5 with my Belkin Wireless G Notebook Network Card in. The install went through around 80% and then BSOD. Upon re-start I man aged to complete the install with the wireless card taken out. Within 15 seconds of the card being inserted it Blue Screened on me. This happened every time the card was inserted or when started with card in. If the card was no in, it would work ok.
Quick question, did you delete all the predefined rules like I did before you ran any other programs??
To me this is one really BIG bug… - IMHO Comodo Firewall BY DEFAULT should NOT let ANYTHING out without asking for a users opinion on what to do…
Predefined rules are fine if you want them, but let the user choose to have them installed or not…
This is supposed to be a firewall, firewalls are supposed to block anything unless otherwise notified…
I know I’m probably going to get a lot of flak for writing that, but hey, it’s a alpha, we testing it, so our opinions on things not right "should count (no matter how outragious) (:TNG)
(:CLP) HI Comodo thanks for the alpha version. I have a Question I tried last night to install the new version went into my control panal and tried to uninstall the old one first so I went back to install the newest one . but came a reply back that the old version was still installed . so I need some help to uninstall the old version 3.0.1.1 help, thanks musicmaker441
Overall the new alpha release is working very smoothly so far.
A couple of concerns though.
1. Does the Defense+ (HIPS) action supposed to work [u]before[/u] CPF loads at startup like the firewall drivers? Only it doesn't seem to happen for me using tests below.
2. Again concerning Defense+. Fails AKLT.exe anti-Keylogger test for "Screenshot 2" option only. Passes all four other options.
I can confirm partially. CPF did not block “Screenshot 2” test but it did request permission for the program to access the keyboard. I wouldn’t call that “stealth”.
