RE: Blocking windows system

Hi, the background for this topic can be found here but I wanted to ask another question about this:

https://forums.comodo.com/firewall-help-cis/should-windows-system-access-the-internet-t68285.0.html;msg483905#msg483905

This is really just for my own understanding. I set svchost.exe, system, explorer.exe to copy from outgoing only and removed the checkbox to “log as a firewall event if this rule is fired”.

I was just wondering what the methodology for setting it as outgoing only was? It is blocking quite a lot of traffic from the ip address of the router to my machine at the moment. The traffic seems to be on random port numbers like 60977, which I don’t use for anything that I know of.

Can you show a screenshot of the logs? That way we can see what the destination ports.

The Outgoing Only rule will protect these important Windows file from getting attacked.