Comodo Firewall went crazy?

Help for v2
1

Guys, take a look at the two pictures, tell me what is happening?

[attachment deleted by admin]

2

Hi sohlican, welcome to the forums.

The Port Unreachable’s look like a torrent or some other P2P application. The Access Granted’s are incoming communications that have been Logged in the Network Monitor by the rule that allowed them access & logged the event. I don’t think the Port Unreachable’s are related to the allowed incoming on port 40675. But, it is impossible to tell from screen shots of CFPs Log.

CFPs Log can be Exported to an HTML file (right-click on the Log). Open the HTML file with your default browser, and you should be able to use a simple click-drag-select & Copy ‘n’ Paste to post Log entries here if you need help with them. Of course, I’m not suggesting that you post them all… just an informative example.

3

Hi thank you for the prompt reply.

This is what I get after exporting to HTML *Part of it.

Btw, i am not running anything on the computer right now except firefox for posting this.

Do advice.

Date/Time :2007-07-01 03:07:40
Severity :Medium
Reporter :Network Monitor
Description:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Incoming
Source: 202.99.233.98
Destination: 192.168.1.2
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 13

Date/Time :2007-07-01 03:07:40
Severity :Medium
Reporter :Network Monitor
Description:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Incoming
Source: 221.208.130.66
Destination: 192.168.1.2
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 13

Date/Time :2007-07-01 03:07:35
Severity :Medium
Reporter :Network Monitor
Description:Inbound Policy Violation (Access Denied, ICMP = PORT UNREACHABLE)
Protocol:ICMP Incoming
Source: 202.99.233.98
Destination: 192.168.1.2
Message: PORT UNREACHABLE
Reason: Network Control Rule ID = 13

4

OK, well CFP blocked these ICMP Incoming packets because they were unsolicited (not asked for). Rule 13 is probably is your default final Block & Log rules in the Network Monitor. If you’re not running any applications, then what was triggering the Access Granted entries (ie. a Network Monitor Log rule) in the screen shots you posted?

PS What about MSN Messenger?

5

Only MSN was running at that time.

The second reply I gave was the time nothing is running at all, not even MSN.

Weird thing is, I tried to power cycle every single device in the network and Rule 13 stops.

Been fine till now.

Just wonder why it happens like that.

You may close this thread if you need to, anything I’ll report back.

Thanks a lot :slight_smile: