Reprompted for existing app rules

Help for v2
#1

Using the current beta, I found that I often get reprompted for applications with existing rules. Most notably, my browsers. For example, I had firefox working fine and then in the middle of using it, I click and link and am asked if I want to allow it to use the internet.

Normally I’d be satisfied with the different parent explanation, but as I said, this happend in the middle of browsing. I clicked a link and it randomly asked permissino again.

#2

Just activate “automatically approve safe applications” and reboot. It is not a bug. It is related with the options you chose during installation of the beta

#3

I don’t want to automatically approve anything. That doesn’t make sense because it’s already approved. In fact it was in the middle of working when it prompted me.

EG:
Seamonkey wants to access the internet (approve + remember)
Browsing site 1
Browsing site 2
Browsing site 3
Click link on site 3
Seamonkey wants to access the internet

#4

Hi,

Can you post images of the two popups which are the same?

Mike

#5

It hasn’t happened again yet, but when I checked the rules, I still only have the two initial rules, In and Out for TCP/UDP.

#6

They may seem the same but probably their security considerations section were pointing to different threats. Let us know when you can capture the screenshots so that we can see why you are receiving them.

Thx,
Egemen

#7

I’m not sure I understand that. If they were made for an other reason, why wouldn’t another rule be added since I checked the remember box?

#8

It does add another rule, possibly an IPC rule but since current versions of CPF do not have an interface to see IPC rules, you could not see. Future versions will have it.

FYI, they are kept under HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo\Personal Firewall\AppCtrl\IPC key.

#9

Well I do have an IPC rule, so I’ll guess that’s it.

One question though, what exactly IS an IPC rule?

#10

It is about remembering the leak requests. For example, APPx has modified the memory of APPy. If you remember this type of popup and allow, then CPF will think this is a legitimate inter process communication and wont ask you about this relationship further. The same is valid for all application behavior analysis options.

Egemen