Do blocked IP ranges appear in TCPview?

Comodo Internet Security - CIS Firewall Help - CIS
1

I’ve got a bunch of blocked IP ranges setup in Comodo Global Rules. Recently I noticed some of the blocked IPs appearing in TCPview. They only appeared on the screen until the next refresh (1S) and then disappeared. Is this normal behavior? Bob

2

Even though you block them the process will still try to connect to those IP’s.

Please check the state column in TCPview.

Dennis

Edit I am presuming these are outgoing blocks, I have never seen incoming blocks should in TCPview.

3

They’re outgoing blocks. State is SYN_SENT or ESTABLISHED. They only stay in TCPview for one refresh. Thanks for the info.

4

If they are actually blocked you should not in any way have ESTABLISED, this means the connection is not blocked.

Will attach screenshot later to show what you should only have.

Dennis

Edit Added screenshot.

[attachment deleted by admin]

5

Global Rules
Block IP in/out address range 67.68.0.0-67.71.255.255
Block IP in/out address range 72.21.80.0 - 72.21.95.255
The connections were SYN_SENT not ESTABLISED ← this may have been a line above/below the one I was reading (tired eyes and 13-hour days don’t help).

[attachment deleted by admin]