Hi all 
I use Comodo Firewall for a long time, but I’m new to forum
I have a problem. I need to open ports JUST FOR 1 application. If I make a Network Rule to open these ports, everybody may connect it, but I need these port only for one application. How can I block all other applications and connections, which are trying to connect to ports?
PS. Sorry for bad English…
Hi serenheit. Welcome to the forum.
I asked the same question when I was new ;). Currently, there is no practical method because network rules are global. Perhaps in a future version this will be possible. But you don’t have to worry because opened ports can only be used by one application at a given session. Once that application is closed, so is the port until another approved application uses it.
The problem is, that application doesn’t work, and the ports are opened 
Can you please post a screenshot of your rules? Also, which application does not work?
Everything works fine I just want to block all connections to port, except 1 application. What kind of screenshot do U want?
The network rules screenshot would be a good start. I assume you want to block all incoming and outgoing connections on that port for all applications except that one? Please specify exactly what you want to achieve. (For example, I only want to allow uTorrent program to have incoming connections to port 30000)
I want ports 1024-1100 for gene6 ftp server. Only this program (in & out) can use this ports and for other connection it must be blocked.
I have attached a network rules sscreenshot
[attachment deleted by admin]
Thanks for posting your rules. I see what you want now. :). As stated before, network rules are global and only trusted applications or ones that you allowed to be connected in the Application Monitor can connect using ports 1024-1100.
At this point the only way I know to restrict other applications in your Application Monitor is to exclude them from using that port range. For example, if I have another program like Opera in Application Monitor that I want to connect but to never use ports 1024-1100, then I have to Edit my rules for Opera accordingly in the Destination Port tab, and select A port range.
The first screenshot shows that my Opera has full outgoing access on TCP and UDP on all ports. The second screenshot further defines that my Opera is not allowed to use ports 1024-1100. This can be tedious if you have to define all Application Monitor rules for other programs like this. It’s probably only necessary for programs that you know also use this port range.
I hope this helps.
[attachment deleted by admin]
Hmm… Now I don’t understand the real property of Network Rule. Does rule (ALLOW all tcp in on ports 1024-1100 ) allow to connect to me on ports 1024-1100 for anybody?
Just to clarify, my screenshots were taken from the Application Rule, not Network Rule and Opera was not allowed to use ports 1024-1100. It was just a demo to show how to prevent other applications from using these ports.
Network Rules are global - they apply to all programs that are in the Application Rules. So if you had other allowed programs in the AppMonitor then they can also use ports 1024-1100 if they chose to, because you have “opened” (allowed) them by your 2 Network Rules.
Do you have other programs that use these ports that you don’t want to? If so just follow my example to prevent them from using those ports.
No, the question is: I’ve opened ports 1024-1100 by Network Rule. Can anybody else connect to my PC using these port or not? And what about applications, which are not included in AppMonitor?
Ok. I see what you mean. Yes, based on your network rules people should be able connect to your PC (incoming connections) using ports 1024-1100 only for programs that you’ve allowed, namely in AppMonitor. For applications that are not appearing in AppMon, they are denied total access by default (Except for certified applications by Comodo if you have that option enabled in Security > Advanced > Miscellaneous > Configure > 2nd option).
So incoming connections are allowed only if they use applications in AppMonitor? That’s good
If it is true, hence, everything is clear
Thanks for fast answers
Not just incoming but also outgoing, depending on your setup and rules. It is confusing at first to distinguish between Application Monitor (what programs can / cannot have internet access) and Network Monitor (how those programs connect to/from the internet, like a router) rules. This is not clearly explained in the help file, which is why it may be difficult to see how both interact with each other ;).
I’m glad this clarified things for you. ;D
So, whats the result??
I don’t understand again, users from Internet can connect to my PC or not? And if they can, how they can do that?
The internet can only connect to your PC based only through the applications you have allowed in the Application Monitor rules, specifically bounded by the Network Rules.
Example: You allowed gene6 ftp server in your Application Monitor outgoing/incoming connections via TCP/UDP (I don’t know exactly as I haven’t seen your rules). This program is restricted by your network rules so that people outside can only connect to your PC and your PC can only connect out through ports 1024-1100.
Didn’t understand :(((
Example: In AppMonitor i have only 1 application: gene6 ftp server, which is allowed to do anything. In Network Monitor I have rules, allowing to connect TCP IN on ports 1024-1100. Other connections will be blocked. Can anybody from the internet connect to my pc without getting connection with gene6?
If gene6 ftp server is the only program in AppMon, then it makes things easier to visualize. To answer your question: No. Nobody from the internet can connect to your PC. They only way is if they also run gene6 ftp server and can only connect to your gene6 ftp server on your PC (through ports 1024-1100).
OK Now everything is really clear Comodo is very good firewall, i see :))
Thanks for help, mb see you around :))
It’s the best firewall, at least in terms of overall security. (:KWL). That’s why we downloaded it (B)