uTorrent Comodo Firewall Guide

Comodo Internet Security - CIS Firewall Help - CIS
#1

So I’ve been following this guide:

https://forums.comodo.com/frequently_asked_questions_faq_for_comodo_firewall/tutorial_for_utorrent_with_comodo_firewall_3-t15677.0.html

to try to get my port forwarding to work and be connectable, and every step is turning out good except the very last step,

3. Start utorrent. When Comodo asks you with a popup, choose Treat this application as select utorrent and enable Remember my answer.

The option to choose utorrent does not show up, so I’m wondering does anyone know the solution to get this to work?

Thanks. :smiley:

#2

OK After you have done the earlier steps there should be a utorrent choice in
the drop down list in the pop up.

#3

That’s the problem.

http://img237.imageshack.us/img237/7460/comodoks6.png

#4

Just from quickly reading the guide, It was supposed to be there.
But the guide is for the firewall before CIS and the thread goes on forever.
There may be a correction or change later in the thread.
I never used the guide, but my utorrent works fine.
I will go and read the thread some more and reconcile my way versus their way.
I’ll get back with a solution.

#5

OK my way is more simplified and less granular, but I am good with it.

Bad Frogger’s uTorrent/CIS Set Up.

  1. Set uTorrent to listen on one high numbered port xxxxx. Between 49152 - 65535
    Deselect > Randomize Port.

  2. Start uTorrent and answer yes & remember to the first firewall pop up.
    If you haven’t allready had one.
    (just to get a utorrent entry in firewall application rules.)

  3. Close uTorrent.

  4. Open firewall > Network Security Policy >Application Rules, select uTorrent > Edit.

  5. In Application Network Access Control > Use a Custom Policy > Add

  6. In Network Control Rule > Allow > TCP or UDP > In > Source Address > Any >
    Destination Address > your MAC address > Source Port > Any > Destination Port >
    your utorrent listening Port from step 1. xxxxx > Apply.

  7. Add > Network Control Rule > Allow > TCP or UDP > Out > Source Address > Any
    Destination Address > Any > Source Port > Any > Destination Port > Any > Apply.

  8. Add > Network Control Rule > Block > tick Log > IP > In/Out > Source Address > Any >
    Destination Address > Any > IP Details > Any > Apply.
    Should look like attached pic 1. > Apply. Should look like pic 2. > Apply.

  9. Global Rules tab > Add > Network Control Rule > Allow > TCP or UDP > In >
    Description > uTorrent Rule (see pic 3.) > Source Address > Any > Destination Address >
    your MAC address > Source Port > Any > Destination Port > your uTorrent listening Port >
    Apply.

  10. Select uTorrent rule > Move Up. (to be sure it is above your existing Block All Rule.)
    pic 4. > Apply.

Note To Turn Off/Close Port at any time just select uTorrent Rule > Move Down below
Block All Rule. > Apply.

The pre existing rules are from running the Stealth Ports Wizard > Invisible to Everyone.

I am not behind a router at the moment so that’s it. Go Hard!

If you are behind a router you have to Open and Forward your Listening Port on the router.
Or your speed will be slow and you will be not connectible.

UPDATE - I have always ignored ICMP Unreachable messages. However it has been
pointed out that blocking these messages can make the firewall log unnecessarily fill up.
And because your uTorrent client doesn’t receive these messages, your client waits until the
original request times out before trying a different peer.
You may find a slight speed increase and keep a cleaner firewall log by adding the following 3 rules.

NOTE Does Not Affect Your Stealth Status.

  1. Global Rules tab > Add > Allow > ICMP > In > Description = Allow ICMP In Host
    Unreachable > Source Address > Any > Destination Address > your MAC address >
    ICMP Details > Message > Icmp Host Unreachable > Apply > Apply.

  2. Global Rules tab > Add > Allow > ICMP > In > Description = Allow ICMP In Network
    Unreachable > Source Address > Any > Destination Address > your MAC address >
    ICMP Details > Message > Icmp Net Unreachable > Apply > Apply.

  3. Global Rules tab > Add > Allow > ICMP > In > Description = Allow ICMP In Port Unreachable

    Source Address > Any > Destination Address > your MAC address > ICMP Details >
    Message > Icmp Port Unreachable > Apply > Apply.

See Pic “ICMP_Host_Port_Net.png” This is how global rules look when done.

[attachment deleted by admin]

#6

Thanks for your help so far but I still need some help. :S

On pic 4, under the global rules you have 4 other rules that I don’t have.

Allow IP Out From IP Any To Any Where Protocol Is Any.
Allow ICMP In From IP Any To IP Any Where ICMP Message Is FRAGMENTATION NEEDED
Allow ICMP In From IP Any To IP Any Where ICMP Message Is TIME EXCEEDED
“uTorrent Rule”
Block And Log IP In From IP Any To IP Any Where Protocol Is Any

#7

Those rules are necessary for stealth ports (makes your PC invisible). I got them by running the
Stealth Ports Wizard on the Firewall Summary Page. You could run the wizard or make them.

The top one is needed to allow out bound.

The 2 Allow rules above the Block and uTorrent in combination with the Block Rule
make your PC not respond to PING’s.

Last whether you Stealth or not a Block rule is a must.
NOTE The last one Block and Log IP IN from IP ANY to IP ANY Where Protocol is ANY.
is critical. It is what blocks all unrequested incoming traffic. The main function of any
firewall.

Rules are read/filtered top to bottom that is why you can open or close your P2P listening Port
by moving your uTorrent rule above=Open or below=Closed the Block rule.

Also I run Configuration in Proactive Security Mode, with Defense+ and Firewall both in Safe Mode.
These settings are on the right click menu on taskbar icon.

Hey just ask if anything else.
Later.

#8

Thanks for your help so far.

I configured all my settings like yours but everything incoming is still getting blocked.

All the inbound connections from uTorrent are still getting blocked.

[attachment deleted by admin]

#9

  • First pick a higher port # between 49152 - 65535.

  • As you are changing the listening port number carefully double check
    all the rules.

  • Double check your MAC address is entered correctly in the appropriate rules.

  • Try the test if port is forwarded properly. In uTorrent > Options > Speed Guide.

Let me know if we have to look at other possibilities.

#10

That definitely did the trick.

Thanks soooo much. :smiley:

#11

Woooo Hoooo!!! :BNC

You are most welcome.

Later

#12

FYI: Setting up Comodo Firewall - General - µTorrent Community Forums

There is a controversy as to which rule set is better: COMODO tutorial (s) vs. Utlimae’s utorrent tutorial.

#13

You do not need to do any of this if are behind a router/hardware firewall. Just make uTorrent trusted and port forward uTorrent im your hardware firewall. All the instructions you need are in the Port Forward site. Click on the check mark on the bottom of uTorrent.

#14

I use the method Vette suggested, as this is quicker and just as secure.

#15

I am on a laptop and not always behind a hardware firewall router.

#16

I use BitTorrent. One thing I’ve noticed, the trackers use port 80. Block that, and the trackers cannot connect.

#17

How does your laptop connect to the internet?

#18

Router at home, but more than once in a while I use utorrent from an non protected wireless access point.
I was thinking about 2 sets of rules.
a. trusted application behind the router (as it is now) for the sake of simplicity
b. special rules set when I need to operate a quick download from a public/non protected access point.

#19

Translation = I get but give nothing?

A Bit Torrent tracker centrally coordinates the P2P transfer of files among users. BitTorrent trackers are software server "toolkit" applications that typically run on Web sites. BNBT and CBTT are names of common BitTorrent tracker toolkits.
  • without connection from the trackers to my machine, can I still download torrents?
#20

Just the opposite, you give but get nothing