Switched from long time use of Zone Alarm and am struggling with the learning curve for Comodo. Why do I see numerous blocks of incoming when I am behind a LinkSys EitherFast Cable/DSL Router BEFSR41 V.2? For example:
Description: Inbound Policy Violation (Access Denied, IP: my main computer, Port 1403
Protocal:TCP Incoming
Source 204.2.192.14: http(80)
Destination: my main computer: 1403
TCP Flags: SYN ACK
Welcome to the forum.
The router doesn’t stop all incoming.
Comodo does…
I don’t think SYN ACK is allowed by default, since it 's often a sign of port scanning.
I have a SPI(NAT + Stateful Packet Inspection) router and i still see background noise on the Windows Firewall from sites i have visited on legitimate ports. (Maybe the router lets the connection time-out while the windows firewall doesn’t allow such a long “time-out” period)
Having a Nat Router (Maybe on your next router, look for SPI and/or IDS (Expensive) capabilities if you really want to be safe) and software firewall between you and the internet makes it allot more complicated for a hacker.