Incoming calls

Comodo Internet Security - CIS Firewall Help - CIS
1

I hope someone can explain this matter to me:
I have 2 pc’s connected to the router (switch).
Approximately every 2. minute the firewall blocks an incoming call from the second pc’s local ip adress.
I can’t see if the opposite is also happening, because I don’t have CIS in the second Pc.
As application, CIS says “system”… Not very informative to me.
I have never intended to have any connection between the Pc’s, and have therefore not installed any software for this purpose.
An explanation will be very welcome, thanks in advance.

Ps. I guess you have heard about the hacker attack on Sourceforge. Shame on the ruthless hackers.

2

Hello;

Could you please export or take a screenshot of the
Firewall Events (CIS > Firewall > Firewall Events > More > File > Export > HTML/Txt

and Global Rules
(CIS > Firewall > Network Security Policy > Global Rules)

Thanks
JAke

3

Sure, here you are. Sorry only screenshots, the firewall log is empty, perhaps I didn’t enable it.

[attachment deleted by admin]

4

System handles the sharing of files, folders and printers over the local network.

If you don’t need that and you don’t want to see those alert set the firewall to stealth. Run the Stealth Ports Wizard and choose the option at the bottom.

5
Approximately every 2. minute the firewall blocks an incoming call from the second pc's local ip adress.
If you don't have some server or specific applications which need to periodically communicate with another machine, my guess is that your PC2 got some bad things behind. It's easy to set up a CIS instance on your PC2 and then check which one is trying to communicate with your PC1.
CIS says "system".... Not very informative to me.
Yah.., I agree -- the "system" in CIS as a fixed reference for C:\Windows folder is not good. If there are some bad executables inside C:\Windows -- when you get infected or get spammed by some adware/spyware, those files are then not 'system' files and should be dealt with different ways to other 'system' files.
6

The logs show only NetBios traffic. That’s not malicious.When you are not interested in sharing files, folders or printers over the local network you can disable NetBios by following this tutorial in the Firewall FAQ.

Yah.., I agree -- the "system" in CIS as a fixed reference for C:\Windows folder is not good. If there are some bad executables inside C:\Windows -- when you get infected or get spammed by some adware/spyware, those files are then not 'system' files and should be dealt with different ways to other 'system' files.
System? You mean %windir%, %systemroot% or %SystemDrive%? Anyway the word system is confusing as there is this instance in Taks Manager called System which is about kernel activity.