Greetings!
I have a few questions about how firewall rules work
- If I have for example only 1 “allow TCP” rule for firefox.exe, will all other connections be blocked or asked through the popup window?
- Is it possible to “cancel” all rules I already set through popup windows? For example I was asked if I want to allow or block svchost.exe 8.8.8.8:53 outgoing connection. I clicked “allow” and now all outgoing connections of svchost to that address:port are allowed (until I restart the system I guess). But what if I regret my decision and want those connections to be blocked? Is there any way to forget this rule without setting custom rules or restarting comodo?
Thanks!
1) If I have for example only 1 "allow TCP" rule for firefox.exe, will all other connections be blocked or asked through the popup window?
It depends on what the firewall mode is set to and what the firewall alert frequency level is set to. If in safe mode then no alert for any other connection will be shown and thus automatically allowed. If in custom ruleset and using the default low alert frequency level then you would get an alert when a connection request happens for UDP.
2) Is it possible to "cancel" all rules I already set through popup windows? For example I was asked if I want to allow or block svchost.exe 8.8.8.8:53 outgoing connection. I clicked "allow" and now all outgoing connections of svchost to that address:port are allowed (until I restart the system I guess). But what if I regret my decision and want those connections to be blocked? Is there any way to forget this rule without setting custom rules or restarting comodo?
You can set the firewall to disabled and wait a while then set it back to custom ruleset. This assumes you didn't have remember my answer checked in the alert, otherwise you can just delete the rule.