rule ignore, if ask rule in front. (x32 3.5.53896.424)

example1:CIS update check (priority Top->down)

1.Comodo internet Security (group)
-Allow Outgoing DNS Requests
-Ask All the Remaining Requests

2.cfp.exe
-Allow Outgoing DNS Requests
-Block CIS IP address

Check “check of updates” button, get “alert windows”.

example2:CIS update check (priority Top->down)

1.cfp.exe
-Allow Outgoing DNS Requests
-Ask All the Remaining Requests
-Block CIS IP address

Check “check of updates” button, get “alert windows”.

Don’t understand… So, you get a prompt, choose “Allow” and complain that the next rule (block) is ignored? I’m afraid that’s no bug since that’s the same like having allow rule followed by deny rule for the same thing. You need to change the order to be the other way round.

Basically the first rule which matches the criteria will be applied. So in your second example, depending on how you have answered, you got either

1.cfp.exe
-Allow Outgoing DNS Requests
-Block CIS IP address
-Block CIS IP address

or

1.cfp.exe
-Allow Outgoing DNS Requests
-Allow CIS IP address
-Block CIS IP address

So as you see, you can’t have any Allow/ Block rule after Ask rule.

The first example is more tricky. I think that you can achieve what you want by putting :

2.cfp.exe
-Allow Outgoing DNS Requests
-Block CIS IP address

above:

1.Comodo internet Security (group)
-Allow Outgoing DNS Requests
-Ask All the Remaining Requests