VPN Network Zone [tap adapter MAC] not working with TorBrowser

Comodo Internet Security - CIS Firewall Help - CIS
#1

I created a network zone called Nord which is set to the MAC address of the Nord TAP adapter.
When I set Firefox to only allow traffic “from in Nord to anywhere” the rule works, and when Nord is disconnected Firefox no longer has internet access.
When I set TorBrowser this way, I get an error from TorBrower “proxy connection is being refused”
So I create a rule to allow 127.0.0.1 port 9150, and now TorBrowser works. (No Nord requirement.)
I got on chat with Nord, and they assured me that when the VPN is connected, all traffic, including 127.0.0.1 port 9150, goes through the VPN.

So why do I have to create a rule to bypass Nord to get TorBrowser to work?

Is this a bug in Comodo?

#2

Because tor browser only communicates with the tor client over loopback/localhost, and loopback/localhost does not have a MAC address. So creating rules based on MAC addresses for the tor browser specifically will break it. As long as you connect to the VPN first then you can use tor normally.

#3

Larry,

I’d like to try the same setup with a different VPN. Do you have a specific tutorial that you followed? The Nord Firefox video I saw seemed to indicate that you needed to input a single VPN address into the Firefox settings and so you were stuck with one location at a time based on your one input. Is this the case? One nice thing about most VPNs is the ability to change VPN servers on the fly with ease, without going into browser settings.

My VPN has a kill switch but having a backup plan in Comodo is a nice idea, even though I’m not sure it’s necessary.

#4

Re: “The Nord Firefox video I saw seemed to indicate that you needed to input a single VPN address into the Firefox settings and so you were stuck with one location at a time based on your one input.”

I have no idea what that’s about. I’ve never entered anything into Firefox. Are you talking about TorBrowser? I never customized that for Nord VPN either.

#5

Is there a way to use Comodo to ensure that Tor can only work through Nord VPN? I don’t trust kill switches (in Nord), and they are a pain, as I have to manually change it too often.

#6

I thought you went into Firefox to set up a proxy. They have settings for that.

#7

Firefox is known to leak. I want to use a firewall for that.