Firewall blocks new router

Hi all!

I have problems with the CIS firewall after having changed my router. I searched the forum and tried options like the “Stealth ports wizard”, however to no avail. Any help would be greatly appreciated!

I’ve been using the CIS firewall on Win XP x64 for over a year. A couple of days ago, I had to change the router, and since then, I can not connect to the internet. I have no problems with two other computers connected to the same router but running different firewalls. Before the router change, the Comodo firewall worked, although each time I opened a web browser for the first time after booting and navigated to an URL, the connection seemed to be blocked. I had to wait a couple of seconds and hit reload, after which everything would work fine.

Some more details:

  • I’m running Comodo firewall 3.8.65951.477 on Win XP x64 Pro SP2
  • With a Netgear WPN824 router, I could connect to the internet, although I had the afore-mentioned
    problems for the first connection
  • I had to change (downgrade) to a Linksys BEFSR41
  • the router is quite old, but with two other Win XP x86 systems connected to it, I can access the internet
    without any problems.
  • the x64 machine gets a valid IP address assigned from the router
  • Default gateway and DNS server are also properly configured
  • Defense+ and Anti Virus were not installed
  • uninstalling the Comodo firewall allowed me to access the internet, but of course is not a real solution.
    Re-installing the firewall brought back the problems.

Are there any configuration options for the firewall / router which might solve these problems?
I am thankful that Comodo provides a firewall also for x64 systems and I would be glad if I could
continue using this product. Again, any help is greatly appreciated!

Best regards,
Andy

Can you look up the firewall rules for syvhost.exe and make sure it is set to outgoing only. Do you see any application being set to Blocked in the list?

When the above doesn’t help can you show a screenshot of your Firewall logs?

hi,

First trun off the comodo firewall, then check it out whether u are able to connect trhe internet, if u can the go to below mentioned there u can find ur router and system ip adress

http://whatismyipaddress.com/

After that turn on the comodo firewall , Then add that both ip adress in my network zone in comodo firewall.

I think now it’s will work

please revert back once u done

Thank you very much for your replies, EricJH and murugankrishna24!

It seemed that changing the rule for “svchost.exe” did the trick, although
I had read about that before in the forum and tried it earlier with no
success. Well, after re-installing the firewall and changing the rule, it
worked for a couple of hours and two or three reboots. But just as I
wanted to preview my reply that everything is working, I could not get a
connection any more. However, the rule is still set to “outgoing only”.
So I’m posting now from a different machine, which is connected to the
same router.

murugankrishna24,
I tried also your suggestions, however with no success. Since the LAN
is already included as trusted network, I believe adding my computer’s
LAN-wide IP address would not make a difference anyway. Or am I
missing the point here? Furthermore, adding my routers internal and
external IP addresses did not change anything. Since I get an external
IP address assigned dynamically on dial-up, adding that address to the
configuration would also be tedious.

Are there other things I could try?

Thanks again!

Can you show me screenshots of your Firewall logs (to see what is happening when your connection blocks), Global Rules and the Application Rules of System and svchost.exe?

Thanks for your continued support, attached is a collection of screenshots with the settings.

[attachment deleted by admin]

You have taken out the Allow IP Out from IP Any to IP Any where Protocol is Any rule. Now you can only connect to your LAN.

Add a Global Rule and fill in as follows:
Action : Allow
Protocol: IP
Direction: Out
Description: I leave that to your imagination

Source Address: Any
Destination Address: Any
IP Details: Any

Ok and Apply your way out. Make sure the rules is above the basic block rule (red icon).

Now you should be good to go. Let us know how it works out.

Thanks a lot EricJH, after rebooting, it works now and hopefully will also in the future.

I might be wrong, but I don’t remember taking out that global rule, especially not after re-installing the firewall when the problems first occurred. Anyway, thank you very much!

Unfortunately, the global rule did not solve my problems. After each reboot, I could access the internet for some time, but then it seemed the firewall was stalled, and only a reboot helped.

In the end, it seems the firewall does not get along well with my new (old) router. As mentioned in my first post, problems started when I had to change to the Linksys BEFSR41 router. Now I have borrowed another router and everything is working fine, also without the suggested global rule. Maybe the router does not adhere strictly to standards and/or the CIS firewall is not robust in some respect. As mentioned before, at any time the internet was accessible from my two other computers also connected to the BEFSR41.

If someone knows a router or firewall setting to improve collaboration between both, I would be curious to learn about that. If not, I’ll probably solve the problem by upgrading to another router.

Again, thanks a lot for your comments!

Best regards, Andy