Disable Firewall for trusted zone

Help for v2
#1

Hello all,

I have created a zone called “LAN” (192.168.0.1 - 192.168.0.254) and want all traffic coming from or going to that zone not to be checked. I’ve run the “Define a new Trusted Network” Wizard which should “define the network zone from/to which all network traffic will be allowed”. It did insert two senseful rules into the Network Monitor. However, traffic from/to that zone is still being checked and there are popups popping up, e.g. for traffic to 192.168.0.100!

Is there some way to pass all traffic from/to the “LAN” zone?

Thanks in advance

#2

Hello vascorppor.

Your probably going to need a Network Monitor Rule or two and also, perhaps, a corresponding Application Rule.

For the NM rule something like:

ALLOW - TCP/UDP - IN/OUT - FROM ZONE(LAN) TO ZONE(LAN) - ANY - ANY

As I say, you may also need rules for your applications in Application Monitor specifically for the ZONE:

App Name - ALLOW TCP/UDP - IN/OUT - ZONE(LAN) - ANY.

Hope that helps

Toggie

#3

Hi,

thanks for your reply.

Is there some way to allow traffic without a corresponding rule in the Application Manager? I don’t want to create rules for every single application accessing my trusted network. A program like “all other programs” would be fine, too.

#4

I think with the NM rules and ‘Advanced/Misc/Do Not Show Alerts for Applications Certified by COMODO’ ticked, you should be ok.

Try with the NM rule and see where it takes you.

Toggie

#5

Hi,

I’ve tried both your NM rule and the “Do Not Show Alerts for Applications Certified by COMODO”, but the firewall still asks me if applications may connect to 192.168.0.100 for DNS queries. I’ve tried Telnet and Thunderbird.

The annoying thing is that every single application that wants to connect to 192.168.0.x creates a popup! But I dont want 192.168.0.x to be secured. This is especially annoying: When I have Comodo create a rule for outgoing traffic, the program is allowed to connect to the Internet as well (rather than just the LAN)!

Isn’t there a default rule for unknown programs, just like in Kerio? Or any option to have the LAN traffic not being checked?