OS: windows 8.1
NO other anti-virus softwares
COMODO v7 (latest version, and install firewall only)
Application: windows’ telnet client (C:\Windows\System32\telnet.exe )
The connection of telnet seems fine, but is blocked if no any keyboard operation within almost 20 seconds and then lose connection. If the firewall is disabled, no blocking happens.
If I disable the firewall just when telnet is blocked (but not lose connection yet), telnet is unblocked right away.
by using the function “View Connections” of COMODO, I find something weird.
The process of telnet will disappear just the same time when it is blocked.
There is no reason that the process of telnet disappear because the window of telnet is still open and the Windows task manager could also find this process.
I find someone talking about the delay/buffer of the input character of telnet: https://forums.comodo.com/firewall-help-cis/packet-delaybuffering-when-using-telnet-t55587.0.html;msg391393#msg391393
I strongly recommend your engineer to check how the exception is handled when the buffering of input character of telnet/ssh makes error.
BTW, my settings:
HIPS ON (tried), HIPS OFF (tried also)
Sandbox OFF
Advanced options of firewall: all checked (tried), all unchecked (tried also)
Allow telnet connection from any resource to any destination for any protocol.
Others are default.
View Connections is not a process manager, it only shows processes with an open connection. So if a connection closes, and no new connections are made, there’s no point in viewing processes with no connections under ‘view connections’.
Another weird thing is the telnet process will still disappear in ‘View Connections’ when the COMODO firewall is DISABLED.
(telnet won’t be blocked but keep connecting to internet.)
As you say, ‘View Connections’ shows processes with an open connection. But actually it lose the monitoring of telnet.
Fixed Alerts are blocked while there pending notifications – This may cause some users to observe blocked Internet, delayed alerts or sometimes freezes.
Yes! I think they fix the problem. Glad to see my telnet not dead (yet).
Blocking is back today.
But in the past one week, it worked good.
I didn’t install any other software during this period.
Today, as usual, I still opened Chrome and telnet, and then found telnet blocked again.
Did you have other security programs installed in the past? If so run clean up tools for them just to be sure all of their components are removed. A list with such tools can be found here: ESET Knowledgebase .
