Couple questions / feature requests

Comodo Internet Security - CIS Firewall Help - CIS
1

Just switched to Comodo, very nice however I have a few general questions if functionally already exists (but hidden somewhere) or feature requests and some general questions.

[feature request or hidden setting?]

  1. Be able to allow all dns queries.
    Searching in the forums, I’ve seen this requested before but still nothing?
    So long as I can define what are valid dns servers, I don’t see the point in being bombarded dns requests. Every single program that wants to connect to the internet first wants to look something up, I will get to the blocking/allowing when an actual connection is trying to be made.

[general question]
2. When I uncheck ‘Enable Alerts for loopback requests’ whats the default action? Will all loopbacks automatically be allowed or denied?

[feature request or hidden setting?]
3. I have the alert frequency set to Very High. However I think it would be more useful if i could bring up a custom rule configuration on the alert window. That way if i wanted to allow a program to access any ip address on port xxx, I can do so in one easy step. Instead I have to allow, then go into the rules, change it from one single ip to any.

[bug report]
4. I was in the Network security policy changing things around, ie #3 above… and another applications alert box popped up. I made some changes to remember, then went back to the network security policy and hit okay and Comodo crashed. When I relaunched comodo my entire Application rules and global rules were erased. :frowning:

[minor feature request or hidden setting?]
5. In the alert window, i think it would be nicer if the default action was always NOT to remember this rule. Currently the check box remembers its position from the last alert window that popped up.

if you read all that, thanks for reading and thanks for an awesome program =]

2

well i guess my post was too long so no one bothered to respond/read… but a few more input.

  1. Be nice if the pop-ups alerted me to both the IP address and the DNS name. For example if svchost.exe is trying to connect to 123.123.123.123, that’s not as useful as if it says ‘123.123.123.123 blahblah.microsoft.com’ etc

  2. https://forums.comodo.com/firewall-help-cis/comodo-v4-versus-v3-allowblock-t59504.0.html
    I think this guy and I are talking about the same thing. If I allow/deny a request, its remembered for the entire time that application is open even if the connection closes and then re-opens AND the ‘remember this rule’ is NOT checked. The OP made an interesting remark regarding an OS file, which means your computer needs to be rebooted before you can get the alert again. Me personally, I don’t have a rule for sending out emails to SMPT, and hit allow when i want to send an email as a fail safe to accidentally hitting send etc. However the connection closes as soon as the email is sent, then any further emails i write can be sent without any kind of pop-up, despite not checking the ‘remember this rule’ checkbox.

Anyone who wants to reply can comment on any single item, don’t feel compelled to respond to all of them. Again, thanks for a great program. :slight_smile:

3
  1. its good that no connection attempt falls through the net of protection. if you start a program, you know if it should have access, and which kind of access to the internet. you can tell with the first question what is to do with its requests. (about dns, maybe its related to ports. but you should not exclude ports from protection for this).
  2. you can add self made “predefined rules”. they appear in the scroll down part of each question window too (same for defense+)
  3. i would not want that each question of my firewall would produce a “lookup for adress resolving” to a page in the internet.
  4. if …exe is allowed to do something, then its allowed to do as long as its running. because you allowed to do that. no reason to stop that in the middle of a process. a problem is, when you tell, treat installer as installer, and then you start the application right out of the finished installer. than this “child process” (the installed game) would have for this running installer rights too.