I’ve been using comodo together with avg for a long time now, but yesterday I decided to try kaspersky antivirus instead of avg. So I installed the free trial of kaspersky antivirus, and I uninstalled comodo v3 and got comodo firewall v4 (Free Firewall | Best Comodo Firewall Software Download 2022 - from there, I believe that’s the one I was looking for?) instead. However, after the install was done and I had restarted my computer, I noticed comodo said nothing about the internet traffic, and the network defense showed 0 intrusion attempts, 0 inbound connections, and 0 outbound connections. The proactive defense runs perfectly well though (it says it has blocked 232 intrusion attempts from my razer mouse already, after only like half an hour ;P)
If anyone could help me, it would be really appreciated…
(This is the right section to ask in, right? D; )
Oh yea, I tried to change the firewall security level to “block all mode”, and it seemed to work as I couldn’t open any webpages. Still no sign of outbound or inbound connections or blocked intrusion attempts though.
CIS is stateful technology, so unitiated connection attempts from the outside get dropped w/out being logged). To see connection attempts you’ll have to create a Global Rule to Allow IN IP ALL ANY ANY (log). If you’re behind a NAT’g router, youlll never see anything even then (except for router IP initiated protocol).
Even if you block all mode, you’re not going to see connection attempts unless you create a logging rule.
Maybe you have logging disabled in “more”, “settings”, “logging”?
What intrigues me is that your mouse is being blocked. What are the src/dest IP and protocol for that? You shouldn’t be blocking your mouse. Sounds like its hitting localhost.
That is not true. The new default settings are default stealth with Block and Log rules at the bottom of Global Rules.
To see connection attempts you’ll have to create a Global Rule to Allow IN IP ALL ANY ANY (log). If you’re behind a NAT’g router, youlll never see anything even then (except for router IP initiated protocol).
That block and log rule makes your allow and log rule unnecessary and as far as I am concerned unwanted.
Even if you block all mode, you're not going to see connection attempts unless you create a logging rule.
Maybe you have logging disabled in “more”, “settings”, “logging”?
I learned in another topic that you have move the slider of Alert Settings to a higher setting (Firewall → Advanced → Firewall Behaviour Settings) to get things reported.
How is it possible for CIS to NOT be ‘stateful;’, i.e., unless intiated by host - drop it, that it can achiieve such high marks against all comers?
Are you saying FWBUILDER - free app - is better? FWBUILDER is totally statefull, depends entirely on system resources, AND has an extra 20% features (compared to the total power-user security freak CIS user.
Are you saying that CIS isn’t stateful with repect to ANY protocol (and NOT just ICMP)?
My bad. CIS is stateful. What I said was in reply to " so unitiated connection attempts from the outside get dropped w/out being logged". CIS does by default block and log all unsolicited incoming traffic.
Are you saying FWBUILDER - free app - is better? FWBUILDER is totally statefull, depends entirely on system resources, AND has an extra 20% features (compared to the total power-user security freak CIS user.
Are you saying that CIS isn’t stateful with repect to ANY protocol (and NOT just ICMP)?
IF that’s true, that’s as scary as demon-poo.
I have never tried FWBuilder so I cannot comment on that.
