[Resolved]Do I really need the last item in my Network Security Policy?

Comodo Internet Security - CIS Firewall Help - CIS
1

Howdy,

For the record I am using a Compaq Presario AMD Athlon™ 64 Processor 3300+, 2411MHz/1.93 GBs RAM, running Windows Xp Home, SP3., with IE8 and I am currently utilizing Comodo Free Firewall version 5.3.176757.1236.

A few days ago I had a similar post concerning Global Rules – https://forums.Comodo.com/empty-t68445.0.html;new;topicseen#new – but I have taken out a few of the rules I had at that time and now I am just trying to make sure my current rules are sufficient to provide firewall protection for my computer

I am attaching a copy of my current ‘Network Security Policy’ rules. I have two basic questions:

(1) Are they in the proper order to provide the correct protection for my computer?

(2) Is the final entry (Block IP In from MAC Any to MAC Any when Protocol is Any) (a) in the correct position, (b) what does it mean in ‘layman’s terms’, and (c) is this rule even necessary on my computer?

744×256 13.7 KB

Thanks and regards,

2harts4ever

2

Hello; 2harts4ever :slight_smile:

1: Yes; Quick question, why do you have the loopback zone in the global poicy? (127.0.0.1)?

2: Yes;

2a: Yes;

2b: In lay man terms if a connection is being made to your computer; it goes from top to bottom of your global rules, thus if it doesn’t match one of the rules displayed then it will get to the bottom thus wil be blocked;

2c; Yes unless of course you would like everyone to be able to connect to your pc :stuck_out_tongue:
(Of course you’ll receive an application alert from either system or svchost etc)

Hope this helps

Jake

3

Hi Jacob,

I appreciate your quick response and your easy to understand explanations.

You asked why I had my ‘Loopback Zone’ in my Policy Rules. To be honest I don’t ever remember putting them in my rules. I always thought Comodo had done it as part of its default set-up.

Are you saying that they (both the ‘in’ and ‘out’) don’t have to be included in my Policy Rules?

Thanks and regards,

2harts4ever

4

It’s not necessary nor is there any Major security risks to have the Loopback Zone as a trusted network;

Could you double click one of the rules and make sure it has a 127.0.0.1 address there?

Your welcome! :slight_smile:

Jake

5

Hi Jacob,

I just double clicked on both of the first two entries but I couldn’t find the address (127.0.0.1) listed anywhere. However, after double clicking each of them and then clicking on ‘Destination Address’ both of them have ‘Loopback Zone’ listed in the ‘Zone’ Heading.

Is that what you mean?

Thanks and regards,

2harts4ever

6

Ok; Yes

Just wanted to verify that it was loopback zone and not something else :slight_smile:

Your A+ Okay

Any other questions ?

Regards
JAke

7

Hi Jacob,

So, should I remove both from my Policy Rules or let them stay put?

Thanks and regards,

2harts4ever

8

You can remove them if you wish; its completely up to you…

If you like neat and clean space then remove, if you couldn’t care to wink twice at a bird that winks back then keep them :slight_smile:

It’s a personal decision atm…

Jake

9

Hi Jacob,

I am going to take your answer ;D to mean they won’t hurt anything right where they are at right now. That being said I will let them continue to ‘clutter up’ my Global Rules …lol

I appreciate your patience in answering what to you must seem like simple questions but to me they seemed mind-boggling.

Have a great weekend! :slight_smile:

Thanks and regards,

2harts4ever

10

Its ok :slight_smile:

I’ve sent you a PM :slight_smile: Hope it helps

%lock%

Jake