Avast WEBforum

Other => General Topics => Topic started by: Cloussau on October 21, 2005, 09:02:37 AM

Title: comodo personal firewall
Post by: Cloussau on October 21, 2005, 09:02:37 AM
Ok here are a few screenshots of the gui for your interest
first one (slide2) is the basic front page which has tabs for all the fine detail info
the slider on the middle left is set at custom which means user defined rules in force
oops i hope you guys dont mind downloading the pics .
as you can tell this is not my field
slide 5 is the front page with 4 changes made to 4 tabs as indicated by arrows
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 09:11:23 AM
next 3 pics are of gui with two of the three tabs down left side depressed and finally a pic of the alert popups
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 09:20:55 AM
last pic thank god Eddy will be freaking out  8)
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 09:50:59 AM
here`s the "sheilds up" opinion in case anyone is interested

   Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.
   
Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
I must say in addittion that I have a 4 port router between helping out

for those wanting to know the resource usage see pic
Title: Re: comodo personal firewall
Post by: DavidR on October 21, 2005, 10:07:36 AM
It certainly looks colourful and I like the identification of the parent application in the Outbound Connection alert. It would be interesting as to how it copes with the leek tests and the zabypass.exe and breakout.exe tests that have been used as Proof of Concepts of bypassing the firewall.
Title: Re: comodo personal firewall
Post by: szc on October 21, 2005, 01:39:12 PM
It certainly looks colourful and I like the identification of the parent application in the Outbound Connection alert. It would be interesting as to how it copes with the leek tests and the zabypass.exe and breakout.exe tests that have been used as Proof of Concepts of bypassing the firewall.

That's exactly why I posted this question in Cloussau's original thread dealing with Comodo firewall:

http://forum.avast.com/index.php?topic=17001.msg144630#msg144630

Quote by me:
Quote
Now, let's get back to the topic... is there any chance you can post those screenshots any time soon ? Also, please provide some more info on how Comodo is behaving when tested with ShieldsUp! and also with TooLeaky http://tooleaky.zensoft.com/

Thanks in advance Cloussau

Also, Cloussau, please enable VM Size (Virtual Memory Size) in your Task Manager, so we can see real memory usage that CPF.exe uses...  ;)

Thanks !
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 02:51:36 PM
ok ive done the too leaky test and because i happened to have Asquared installed alongside the intrusion test was stopped not only by A2 but also by CPF but i think it was outbound see pic and also is the other taskman screenshot
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 02:59:05 PM
No i was wrong the too leaky alert was for incoming and when i turned A2 off I got 2 alerts from cpf which were both outgoing and incoming.
seems to have everything covered :-\
Title: Re: comodo personal firewall
Post by: DavidR on October 21, 2005, 03:18:21 PM
Want to try the zabypass.exe and breakout.exe tests that have been used as Proof of Concepts of bypassing the firewall. It would also be interesting to see if A2 picks them up to.

ZAbypass - Hackingspirits.com Proof-of-Concept (http://www.hackingspirits.com/vuln-rnd/vuln-rnd.html)
Title: Re: comodo personal firewall
Post by: szc on October 21, 2005, 03:25:55 PM
No i was wrong the too leaky alert was for incoming and when i turned A2 off I got 2 alerts from cpf which were both outgoing and incoming.
seems to have everything covered :-\

That's good to hear, really good. It looks like it deals with those things exactly as Kerio with Application Behaviour Blocking feature enabled and ZoneAlarm Pro. ZoneAlarm Freeware will not pass that test...

That's really good to hear Cloussau !

Btw, In your task manager, chose Processes TAB. Now go to VIEW (dropdown menu up there) and chose SELECT COLUMNS... Now put a checkmark on Virtual Memory Size box. Click OK and now you are able to see VM Size column. Resize your Task Manager window if needed to see everything...

Cheers !
Title: Re: comodo personal firewall
Post by: Cloussau on October 21, 2005, 03:29:59 PM
I tried the ZAbypass exe but im a little confused because im not sure got the full gist of what it was supposed to prove a vulnerability. on executing i was transferred to a web page which didnt confirm or deny what had occurred.? getting late down here 11.30 pm and i got a 5am rise so im gonna call it quits for tonite and look at breakout exe (which i couldnt find) tomorrow .
hope this has been of some use  :)
Title: Re: comodo personal firewall
Post by: szc on October 21, 2005, 03:42:40 PM
Yes of course it is useful Cloussau !

Thank you for your effort !

I see that Comodo uses little bit more resources than Kerio... KPF.exe (Kerio) is at 9 Mb VM Size... but sure it looks like a wonderful firewall... and best of all, all those features for free. ZA free doesn't protect you on all fields as we all know...
Title: Re: comodo personal firewall
Post by: DavidR on October 21, 2005, 04:10:27 PM
I tried the ZAbypass exe but im a little confused because im not sure got the full gist of what it was supposed to prove a vulnerability. on executing i was transferred to a web page which didnt confirm or deny what had occurred.?
hope this has been of some use :)
Yes it has been very helpful, it confirms that CPF is vulnerable to this DDE exploit also. I started a thread at the Outpost forums as it too is vulnerable, there is a lot of feedback there. Bypassing Personal Firewall - Proof-of-Concept (http://www.outpostfirewall.com/forum/showthread.php?t=15238&page=1&pp=15)

If you arrived at the website without your firewall or A2 intervening, then your firewall has been bypassed (what browser did you use). You will have noticed that when you ran zabypass.exe there was a string of text (which you can change), that string is replicated at the PofC test page you were sent to.
Quote
This is a demo page and has been hosted to demonstrate how a personal firewall can be bypassed and a malicious program can communicate with its master by injecting the data via other trusted programs (here it is IE) in the system. No information are logged during the demo other than the hit count.
Obviously this could be more than a harmless string of meaningless text.

If you don't have your browser started then it is likely that it will detect this PofC, however if it is already started which is very likely in real life (and it is a Multi Tab browser) then it is very likely to get past.

Re: breakout.exe
Quote
As a matter of fact there are more programs that can bypass personal firewalls. Volker Birk, a member of the respected German Chaos Computer Club (CCC), presented a small program that establishes an internet connection, and Outpost (and probably any other PFW) simply doesn't see it.

The source code for the IE-version can be found on http://www.dingens.org/breakout.c , the executable on http://www.dingens.org/breakout.exe, the source code for Firefox on http://www.dingens.org/breakout-mozilla-firefox.c and the respective executable on http://www.dingens.org/breakout-mozilla-firefox.exe .
So breakout doesn't seem to be as flexible as zabypass which uses your default browser, breakout.exe is browser specific. Since a very large majority still use IE as their default browser it would work (bypass the firewall) for most people.
Title: Re: comodo personal firewall
Post by: szc on October 21, 2005, 04:28:10 PM
...
...
Yes it has been very helpful, it confirms that CPF is vulnerable to this DDE exploit also. I started a thread at the Outpost forums as it too is vulnerable, there is a lot of feedback there. Bypassing Personal Firewall - Proof-of-Concept (http://www.outpostfirewall.com/forum/showthread.php?t=15238&page=1&pp=15)

If you arrived at the website without your firewall or A2 intervening, then your firewall has been bypassed (what browser did you use). You will have noticed that when you ran zabypass.exe there was a string of text (which you can change), that string is replicated at the PofC test page you were sent to.
...
...

Exactly, and even worse Kerio fails at that test too. So it tells us something new... Comodo Firewall didn't pass that test, but it can not be classified as worse than any other better known firewall out there. For sure it passes those tests better than ZA free.
Title: Re: comodo personal firewall
Post by: DavidR on October 21, 2005, 05:12:19 PM
No one is saying it is any worse than or better than any other firewall, this is an exploit that is hitting virtually all firewalls with the exclusion of ZA Pro which picks it up. Not having ZA Pro or a second system I can't fully check it with a range of browsers as I have done with Outpost Pro.

Many firewalls are able to detect it if you don't have your browser open, once open if using a tabbed browser the likelihood is it will open in a new tab without intervention from the firewall.

If IE isn't set-up to open in a new windows (reuse existing window) then it can get past that as a new occurance of the browser isn't activated and as such won't be tested by the firewall's Hidden Process checks.
Title: Re: comodo personal firewall
Post by: szc on October 21, 2005, 05:18:26 PM

Exactly, and even worse Kerio fails at that test too. So it tells us something new... Comodo Firewall didn't pass that test, but it can not be classified as worse than any other better known firewall out there. For sure it passes those tests better than ZA free.


What I said up there doesn't mean I said you or anyone else said Comodo is worse than any other firewall out there. I simply said, we can think of it as an equal runner in this "race". After all, this thread is called Comodo Personal Firewall... and I believe it is started to find out about that firewall little bit more. So, we did it. I am just happy to see that it can run shoulder to shoulder with other firewalls, that's all...

Cheers !
Title: Re: comodo personal firewall
Post by: Cloussau on October 22, 2005, 08:21:01 AM
Hi ppls , I tried the breakout exe`s for both firefox (which is defalt) and for IE but again im not sure wether the lack of action after activating either was a success or a no result.  :-\ by the way all results so far have been using firefox. at least after  activating the IE breakout exe i got  the first image and the second is another snap of the VM usage which is significantly less with less programs open. Does that fit?
Title: Re: comodo personal firewall
Post by: RNfromTN on October 23, 2005, 02:40:00 PM
I hope Cloussau is still testing comodo.These alerts are generated from web surfing,(yahoo,dsl reports,avast forum,ect).I am behind nat router with stateful packet inspection,passes all online port scans that I've tried.Does anyone else with routers have log files with their software firewall simular to  this? I never have logs like this with ZA. Nothing unusual scanned by avast.
Title: Re: comodo personal firewall
Post by: szc on October 23, 2005, 02:49:16 PM
And this looks really nice... really useful info over there, some detailed information.

You guys are doing great job, keep it up. Every single minute I'm thinking more and more to give it a go, and see how everything works on my spare machine.

Cheers !
Title: Re: comodo personal firewall
Post by: RNfromTN on October 23, 2005, 02:53:23 PM
And this looks really nice... really useful info over there, some detailed information.

You guys are doing great job, keep it up. Every single minute I'm thinking more and more to give it a go, and see how everything works on my spare machine.

Cheers !
Makes me wonder if we're as safe as we think we are behind routers.
Title: Re: comodo personal firewall
Post by: szc on October 23, 2005, 03:00:21 PM
Believe me, if properly set up, closed all those ports which needs to be closed, you don't have to worry that much... anyway, do you have any information in your computer which is unbelievable important that no one outside should see ? I don't think so, after all you are not an secret service or anything like that  ;D  ;D

If your answer is yes, then I wouldn't keep those information in there if I were you... all those information, data, and other stuff you should keep on some DVDs, CDs, or even spare hard drive.

People worry too much sometimes, so I would say, we are never 100% safe, but behind a hardware router/firewall and software one as well, you are pretty safe and you can sleep tight...

Cheers !

EDIT: Also you can help yourself as well... do not surf those suspicious sites with patchs, cracks, serials, XXX sites, casino sites... be careful whe using P2P programs, enable avast! P2P provider for the P2P client you use, etc...
Title: Re: comodo personal firewall
Post by: RNfromTN on October 23, 2005, 03:16:33 PM
Hi s.z.craftec, I'm just a welder  :P and don't surf the suspicious sites.Just thought it interesting to see. Must be doing its job. A little off the topic,do you make avatars for forum members?
Title: Re: comodo personal firewall
Post by: szc on October 23, 2005, 03:25:47 PM
Haha, nothig wron in being a welder my friend... I was one as well when I first came to this wonderful country... this country doesn't recognize our school diplomas from Europe, even if you were Einstein, haha... so in the beginning you have to work all kind of jobs. I was welder on three spot welder as well as doing some other general labour jobs.

No work is to be ashamed of, only if you can work, are able to work and you don't want to work...  ;)

Welders also tend to visit all kinds of sites my friend, so you still have to be very careful  ;D   ;D   ;D

Well, sometimes when I catch some free time, I make some avatars for my forum pals...

See here:  http://forum.avast.com/index.php?topic=8340.0

More than 200 avatars by now...  ;D
Title: Re: comodo personal firewall
Post by: RNfromTN on October 23, 2005, 03:38:05 PM
Haha, nothig wron in being a welder my friend... I was one as well when I first came to this wonderful country... this country doesn't recognize our school diplomas from Europe, even if you were Einstein, haha... so in the beginning you have to work all kind of jobs. I was welder on three spot welder as well as doing some other general labour jobs.

No work is to be ashamed of, only if you can work, are able to work and you don't want to work...  ;)

Welders also tend to visit all kinds of sites my friend, so you still have to be very careful  ;D   ;D   ;D

Well, sometimes when I catch some free time, I make some avatars for my forum pals...

See here:  http://forum.avast.com/index.php?topic=8340.0

More than 200 avatars by now...  ;D
  I can weld the crack of dawn ;D but not a broken heart :'( if you get spare time and want to make a new avatar ,I love the three stooges ;D especially shemp.thanks tim
Title: Re: comodo personal firewall
Post by: szc on October 23, 2005, 04:33:52 PM
Timcan, here it is:

http://forum.avast.com/index.php?topic=8340.msg145026#msg145026

Hope you'll like it...

Regards !
Title: Re: comodo personal firewall
Post by: RNfromTN on October 23, 2005, 07:40:07 PM
Timcan, here it is:

http://forum.avast.com/index.php?topic=8340.msg145026#msg145026

Hope you'll like it...

Regards !
Like it? I love it! You were all over that one. :)Again thank you
Title: Re: comodo personal firewall
Post by: szc on October 23, 2005, 07:46:17 PM
I am really happy to see you are being so grateful, but there is really no need to thank me my friend. I am happy if you like it, and my reward is to see you "wearing" it in this forum... you sure "welded" it nicely in your profile timcan, hehe  ;D  ;D
Title: Re: comodo personal firewall
Post by: Cloussau on October 23, 2005, 11:17:50 PM
To be honest i havent paid much attention to the reporting side as yet.
 There is a nice feature that i hadnt revealed to anyone yet but as im at work it`ll have to wait.
There`s a whole bunch of learning wizards for applications like Avast!,A2,messenger programs,and mail clients that use web connection that i hadnt picked up on. Makes the whole process of enabling access so much easier. :)
Title: Re: comodo personal firewall
Post by: Cloussau on October 25, 2005, 02:03:58 PM
worth noting that since I can recall a software firewall would automatically de-activate windows firewall but not any more. I noticed today that windows firewall was active alongside CPF.
When i de-activate windows firewall windows security centre then decides it wont play ball and monitor CPF so this must have happened  recently .  ???
Or maybe my heads been in the sand. :P
Title: Re: comodo personal firewall
Post by: RNfromTN on October 25, 2005, 11:09:54 PM
Same here Cloussau,had to turn off windows firewall manually and tell security center I would monitor myself.Maybe como do can fix this in an update. I believe sygate pro is not reconized either.
Title: Re: comodo personal firewall
Post by: cyfer on October 26, 2005, 09:02:07 PM
Why doesn't Comodo or Sygate pro, recognize Windows Security Center?
Title: Re: comodo personal firewall
Post by: DavidR on October 26, 2005, 09:45:58 PM
That is the other way round surely, Why doesn't Windows Security Center recognize Comodo or Sygate pro?

1. Comodo is too new.
2. I don't use Sygate, but there were issues in the past with it not being recognised, I can't say if this is correct for the current version. However if you know it is working you can disable the WSC check. You could probably get a more accurate answer at the sygate forum.
Title: Re: comodo personal firewall
Post by: cyfer on November 03, 2005, 11:08:48 PM
New version of Comodo Firewall... http://www.personalfirewall.trustix.com/

(http://www.comodogroup.com/images/products/pfscreen.gif)
Title: Re: comodo personal firewall
Post by: johnny223 on November 04, 2005, 04:21:13 AM
New version of Comodo Firewall... http://www.personalfirewall.trustix.com/

(http://www.comodogroup.com/images/products/pfscreen.gif)

So is this new version recognized by windows security center now?
Title: Re: comodo personal firewall
Post by: szc on November 04, 2005, 04:54:07 AM
That's really not that important after all... if this firewall does it's job well (as it does), it really doesn't matter what Windows says. Same thing with ZoneAlarm not recognizing avast! installed on your system as an antivirus... that doesn't mean avast! is not good antivirus, and of course no one should be scared and stop using avast! just because of that.

Comodo really looks like promising firewall, and as far as I know, it passed all those tests. The ones that Comodo failed, I am sure, even some better known firewalls failed as well.

Best of all, even in it's freeware version, it's 100% complete firewall. Try to pass Tooleaky ( http://tooleaky.zensoft.com ) with ZoneAlarm free... there is no chance it will pass. I tried it while I was still using it, and it failed. Only Pro version passed that test. But with Comodo, you don't have to worry about Tooleaky...
Title: Re: comodo personal firewall
Post by: johnny223 on November 06, 2005, 05:47:31 AM
you're right S.Z.Craftec, doesnt really matter.

anyway, i have to problem setting up this firewall, i went to some firewall test websites and it failed all of them.  i'm sure i'm just not setting it up right, could you guys tell me some basic settings i need to do to make my computer stealth?

thanks.
Title: Re: comodo personal firewall
Post by: StopMe on November 06, 2005, 05:50:05 AM
Firewalls should automatically stealth your PC by default hmmm   :-\ of course its possible that you might have to do some configurations.  What test did you use?

Try these if you haven't yet:

Shields Up (https://www.grc.com/x/ne.dll?bh0bkyd2)

Sygate SOS (http://scan.sygatetech.com/)

Title: Re: comodo personal firewall
Post by: johnny223 on November 06, 2005, 06:01:58 AM
it failed those test, some are stealth and some are just "closed", what did i do wrong, need help from whoever's using this firewall please ???  This never happened when i used zonealarm, kerio or sygate.
Title: Re: comodo personal firewall
Post by: johnny223 on November 06, 2005, 06:15:05 AM
Nevermind, i reinstalled it and everything's fine, dont know what i did before,  ;D how stupid i am.

anyway, thanks.
Title: Re: comodo personal firewall
Post by: StopMe on November 06, 2005, 07:32:33 AM
Nevermind, i reinstalled it and everything's fine, dont know what i did before,  ;D how stupid i am.

anyway, thanks.

You're not stupid, everyone makes mistakes.  I'm glad that Comodo is stealthing your PC now.   ;D
Title: Re: comodo personal firewall
Post by: PigDog on November 06, 2005, 01:15:25 PM
I'm glad you are having good experiences with Comodo.  I tried to change from Sygate to Comodo and had nothing but problems.  Ages to boot and completely broken connection.  Comodo couldn't even connect to it's own servers to verify my lisence.

I'll try it next time I upgrade to a new machine, but for now thank god for system restore.
Title: Re: comodo personal firewall
Post by: RNfromTN on November 06, 2005, 01:28:43 PM
http://forum.avast.com/index.php?topic=17001.msg144775#msg144775This was my first post using comodo if you haven't seen it.So far I'm pleased with comodo. No slow boot up here.
Title: Re: comodo personal firewall
Post by: johnny223 on November 06, 2005, 08:01:39 PM
Actually my computer has slowed down booting up after installing comodo firewall, avast's starting up slower also.  comodo does take a while to start on my computer, other than that, the firewall's fine.
Title: Re: comodo personal firewall
Post by: Lisandro on November 06, 2005, 08:21:24 PM
Actually my computer has slowed down booting up after installing comodo firewall, avast's starting up slower also.  comodo does take a while to start on my computer, other than that, the firewall's fine.
Firewall + antivirus always are due to startup delay... One interacts with the other... it's not easy to solve...
Title: Re: comodo personal firewall
Post by: DavidR on November 06, 2005, 08:23:57 PM
Comodo may be accessing a lot of files on boot, which will be scanned by avast, if your standard shield setting is on high it will scan all these files. On Normal it will only scan certain files, this could improve boot times.
Title: Re: comodo personal firewall
Post by: szc on November 07, 2005, 02:15:25 PM
Few screenshots from my end... I have to say that I am unbelievable happy with this firewall so far... in combination with my new Linksys befw11s4 v4 wireless router/firewall it gives a wonderful protection. Also, no slow down after instaling Comodo firewall at all. On my other computer after complete uninstalling avast! and Kerio, boot time went down to unbelievable 8 seconds, like it was before... after installing Comodo (note, still no antivirus) booting time went up to 12 seconds which is still unbelievable good. I installed NOD32 on my other machine and boot time raised again to 20 to at most 25 seconds (from typing in my log-in to complete shut off of HD led) which is still unbelievable good and much better than with avast! installed. After latest few avast! program updates, it's obvious that boot time for many people extended quite a bit... You can see it ONLY if you perform these tests I just did. You have to have your avast! completely uninstalled to be able to see the difference.

See some of many Comodo configuration pages:

Activation process:
(http://img490.imageshack.us/img490/2089/untitled16xh.jpg)

Activation process successful:
(http://img212.imageshack.us/img212/2599/untitled26xl.jpg)

Task manager status:
(http://img223.imageshack.us/img223/1641/untitled32gj.jpg)

Configuration pages:
(http://img237.imageshack.us/img237/4729/untitled40qd.jpg)

(http://img97.imageshack.us/img97/3610/untitled56xe.jpg)

(http://img155.imageshack.us/img155/7581/untitled67uo.jpg)

(http://img192.imageshack.us/img192/6600/untitled70bg.jpg)

(http://img194.imageshack.us/img194/4028/untitled89bg.jpg)

(http://img175.imageshack.us/img175/9736/untitled93zq.jpg)

(http://img290.imageshack.us/img290/4623/untitleda8ts.jpg)

Tooleaky.exe test passed:
(http://img330.imageshack.us/img330/5369/untitledb2ze.jpg)

And Shields Up!! testing screenies...

File sharing:
(http://img230.imageshack.us/img230/9220/untitledd7wt.jpg)

Common ports:
(http://img206.imageshack.us/img206/5374/untitlede2jg.jpg)

All Service Ports:
(http://img206.imageshack.us/img206/323/untitledf9rl.jpg)

Cheers!
Title: Re: comodo personal firewall
Post by: AvastForever on November 08, 2005, 02:26:02 AM
Can anyone tell me if Comodo Personal Firewall is better than ZoneAlarm (Free Version) and why please? Im using ZoneAlarm (Free) should i switch? ??? ???
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 02:35:00 AM
As I already mentioned many times in the past... we don't have to go further than tooleaky.exe

Just follow these instructions:

http://tooleaky.zensoft.com

Download this file from that web page:

http://tooleaky.zensoft.com/tooleaky.exe

Do not worry, it's nothing malicious, and you can be sure because no one normal in here would give you some malicious link to play with...  ;)

Save that file somewhere on your local disk and run it from there. I'm 100% sure your firewall will fail that test. I am sure because I was using ZA free and I abandoned it right away (not just because of that though)...

Comodo will pass this test right away. It will give you a pop-up window asking you what do you want to do next (see one of those many screenshots I attached in my previous post, ok here it is again)...

Tooleaky.exe test passed:
(http://img330.imageshack.us/img330/5369/untitledb2ze.jpg)

...allow it or not... if your common sense is telling you not to allow it, of course you will not allow tooleaky.exe launch the IE. Of course in this case if you want your firewall to pass this test, you have to chose DENY. Otherwise it will fail... but it's not gonna be firewall's fault... it's gonna be yours, because you consciously allowed that file to access the internet...

ZA free will not even ask you... it will immediately launch that application. Remember, it could have been some malicious code instead...  ;)

That's why...
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 02:40:43 AM
Oh yes... and no one can tell you which one is better... those are discussions for kids IMHO. Every firewall has something that makes it better or worse than others. You have to find what's best for you and what gives you best possible protection.

You will never get straight answer on a question like that... why ? Because there is literally millions of users which uses different programs, and some of them works best for some, and some other works better for some other...

I just gave you one example and there are some others as well... you have to "play" with those things and then you can say what is serving you the best...
Title: Re: comodo personal firewall
Post by: AvastForever on November 08, 2005, 02:45:43 AM
Oh yes... and no one can tell you which one is better... those are discussions for kids IMHO. Every firewall has something that makes it better or worse than others. You have to find what's best for you and what gives you best possible protection.

You will never get straight answer on a question like that... why ? Because there is literally millions of users which uses different programs, and some of them works best for some, and some other works better for some other...

I just gave you one example and there are some others as well... you have to "play" with those things and then you can say what is serving you the best...

True, Very True. Thanks
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 02:48:18 AM
No problems, if you have any questions or concerns just ask... we are here to help each other with advices. No one knows everything, but we all know something, and when we collect all those pieces, our knowledge database grows.

Cheers !
Title: Re: comodo personal firewall
Post by: AvastForever on November 08, 2005, 02:53:30 AM
No problems, if you have any questions or concerns just ask... we are here to help each other with advices. No one knows everything, but we all know something, and when we collect all those pieces, our knowledge database grows.

Cheers !

Ok. And yea one more question is Comodo Personal Firewall free forever. I heard its only free for one year than after you have to pay, is that true?
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 03:06:59 AM
No that is absolutelly not true. I'm sure just because few hours ago I asked exactly the same question one of those technical support guys, and they answered to me immediatelly.

Product is free. It has one year valid licence... just like avast! free version, although avast! has 14 months registration period, but it doesn't mean anything in this case...

After one year, you just have to re-register... just like with avast!. And your licence will be extended for another 365 days. Just statistic purpose, nothing else.

Otherwise, it would be against any logic... when their licence expires after 365 days, everyone could just register under different name and e-mail and get another free year... right ?  ;)
Title: Re: comodo personal firewall
Post by: StopMe on November 08, 2005, 04:32:57 AM


Otherwise, it would be against any logic... when their licence expires after 365 days, everyone could just register under different name and e-mail and get another free year... right ?  ;)

Different email? Are you saying that after one year is up in order to recieved another one year key we have to register another email account?   :o ;D

P.S. Wow, I love this firewall's design.  Hey did you test it with Sygate SOS?  From your screenshots, this firewall looks fairly simple for most users.  I'm not exactly sure if everyone can follow through the configurations just yet.  ;)

Sygate SOS (http://scan.sygatetech.com/)




Title: Re: comodo personal firewall
Post by: Cloussau on November 08, 2005, 06:27:39 AM
Quote
  I'm not exactly sure if everyone can follow through the configurations just yet.  ;)


If you think this one`s tough then dont  try the jetico one.
I found it very taxing to get moving with whereas this one was set up to go in seconds. ;)
Title: Re: comodo personal firewall
Post by: neal63 on November 08, 2005, 06:55:25 AM
I just wanted to add my experiences with this product. I downloaded it today, took the GRC test and got the same results as S.Z. did. I have it set to "custom" level. I uninstalled Kerio after downloading Comodo and I really like this program. On my computer there is only about 5 mbs difference in size between the two firewalls with Comodo being the larger one at about 15 mbs. But, that's not a problem for me or my machine. It's passed all the grc stealth etc tests so far. As far as some of the other tests mentioned in the thread I haven't gone there with this F.W. yet as it's time for me to go to bed.
   Am very pleased with it so far. Appreciate the testing and discussion about it earlier. This was a great factor in helping me make the decision to give it a try.  Oh, I got the full 1 year free license good through November of 2006. Thanks to all. 
Title: Re: comodo personal firewall
Post by: FreewheelinFrank on November 08, 2005, 10:25:48 AM
I tried out Comodo briefly, but it sees Firefox running under Drop My Rights as an 'invisible application' for which it cannot learn any rules.

Anybody using Comodo needs to understand TCP and UDP connections. There is nothing to highlight that TCP in is dangerous. (Unlike Kerio which gives them a red banner.)

All the connection pop-ups look the same and it's easy to click yes without noticing that it's a potentially dangerous connection.

The firewall seemed to be stable and secure, but a little bit difficult for users who don't really understand internet connections. (Like me.)

It needs to be a little bit more user-friendly if it's going to compete with ZA.
Title: Re: comodo personal firewall
Post by: RNfromTN on November 08, 2005, 12:00:16 PM
Few screenshots from my end... I have to say that I am unbelievable happy with this firewall so far... in combination with my new Linksys befw11s4 v4 wireless router/firewall it gives a wonderful protection. Also, no slow down after instaling Comodo firewall at all. On my other computer after complete uninstalling avast! and Kerio, boot time went down to unbelievable 8 seconds, like it was before... after installing Comodo (note, still no antivirus) booting time went up to 12 seconds which is still unbelievable good. I installed NOD32 on my other machine and boot time raised again to 20 to at most 25 seconds (from typing in my log-in to complete shut off of HD led) which is still unbelievable good and much better than with avast! installed. After latest few avast! program updates, it's obvious that boot time for many people extended quite a bit... You can see it ONLY if you perform these tests I just did. You have to have your avast! completely uninstalled to be able to see the difference.





[If you did the shields up test (or any for that matter)while connected to router/firewall you're probing the router ip not your computer.

Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 01:26:06 PM
I tried out Comodo briefly, but it sees Firefox running under Drop My Rights as an 'invisible application' for which it cannot learn any rules.

Anybody using Comodo needs to understand TCP and UDP connections. There is nothing to highlight that TCP in is dangerous. (Unlike Kerio which gives them a red banner.) All the connection pop-ups look the same and it's easy to click yes without noticing that it's a potentially dangerous connection.
...
...

True, they could solve that a little bit better... but hey c'mon... firewall just kicked in, we all can contribute somehow. No one is saying we are not allowed to give them our suggestions so they can improve it for the one of upcoming releases. I'm sure they would listen some reasonable suggestions. I sent them 2 e-mails in just one day and I in next few hours I already got two answers... it tells something. It's a freeware product and still there technical support completely free of charge. Similar to avast! Isn't that what counts ?

The firewall seemed to be stable and secure, but a little bit difficult for users who don't really understand internet connections. (Like me.)

It needs to be a little bit more user-friendly if it's going to compete with ZA.


That's why we have some easy-to-use firewalls, as well as some rule based firewalls for more experienced users...

There is so many settings you can manually configure it's just unbelievable... I would need to extend this thread at least 5 additional pages to post all screenshots. You can always add new banned/allowed application through the very first screen you see when you open Comodo firewall...

(http://img480.imageshack.us/img480/8218/untitled19pf.jpg)

Oh yes, it already competes with ZA freeware (we are talking about freeware class), as I mentioned ZA freeware doesn't even try to warn you when tooleaky.exe is trying to execute, it just aloows it do it's thing without even asking a user... And tooleaky.exe is just one of many of those...

[If you did the shields up test (or any for that matter)while connected to router/firewall you're probing the router ip not your computer.

Of course my friend, I know what you are talking about. And everybody should know that for a long time by now... we are in computer security related forums. I just thought it's not needed to repeat that, I assumed everyone already knows how to test software firewalls.

Yes, of course, I bypassed my hardware router/firewall while doing these tests. I was in the middle of switching from my old D-Link DI-604 to Linksys BEFW11S4 v4 wireless router (got a brand new laptop as a present from my wife so I finally decided to move to wireless, although my primary desktop PC is still connected through wires... always playing on safe side  ;) ).

I thought that was also good idea to try some other software firewall, and Comodo looks so promising already. I think I'm gonna stick with it for a long time...
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 01:42:17 PM
...
...
Hey did you test it with Sygate SOS?
...
...
Sygate SOS (http://scan.sygatetech.com/)
...
...

Yes I did those tests too... with IE as well as with Firefox 1.5, see here:

(http://img486.imageshack.us/img486/7739/untitled26eu.jpg)

Also, I have to say I've noticed a decrease in boot time (Windows startup goes faster)... I mean, from the point when you enter your Windows log-in to the point when HD LED is completely off after I removed Kerio and installed Comodo. Comodo and avast! works perfect and I'm surelly not going back to Kerio or ZA.
Title: Re: comodo personal firewall
Post by: szc on November 08, 2005, 02:04:14 PM
Ok. And yea one more question is Comodo Personal Firewall free forever. I heard its only free for one year than after you have to pay, is that true?

To prove what I stated above, here you can read those mails I exchanged with one of the guys (Allan) from technical support... (sorted ascending, I am blue, he is red)

-----Original Message-----
From: "Sasha" <hidden e-mail address>
Received: 11/7/2005 9:37 PM
To: personalfirewall@comodo.com
Subject: RE: Need brief info regarding Comodo firewall


Hello from Toronto,

I started to use your wonderful firewall, and I have to say I am simply amazed. You guys are great providing such a wonderful firewall for free. It passed all those online test, and I think I'll continue to use it and to recommend it to all my friends and contacts. I am also a part of avast! antivirus technical support.

I have just one question... on your web site, it says Comodo Personal Firewall free for 365 days. Does that mean that it will not be free after that period is over, or you just have to Update your licence and continue using it ?

Any info would be greatly appreciated.
Thanks for your answer in advance !

Regards,
Sasha

----- Original Message -----
From: Desktop Personal Firewall - Comodo
To: Sasha
Sent: Monday, November 07, 2005 11:06 PM
Subject: RE: Need brief info regarding Comodo firewall [193973:210431]


Hi Sasha,

After 365 days of validitiy then you have to update/upgrade the license or you can update directly from our site.
Should have any queries do not hesitate to write to us.

Regards
Allan
Technical Support

-----Original Message-----
From: "Sasha" <hidden e-mail address>
Received: 11/8/2005 1:25 AM
To: "Desktop Personal Firewall - Comodo" <personalfirewall@comodo.com>
Subject: Re: Need brief info regarding Comodo firewall [193973:210431]


Thank you Allan for your prompt respond, I really appreciate it.

However, one thing is still little bit unclear to me... we have avast! antivirus paid for version as well as Freeware version. Registration (just like with Comodo firewall) is once in a 14 months, but we know that registration is just for statistic purpose.

What I wonder is, will Comodo still be free after one year period has expired (of course you have to re-register) or will we have to upgrade/switch to some paid for version ?

Thanks in advance and again thanks for your response !
Keep up the good work guys !
Sasha

----- Original Message -----
From: Desktop Personal Firewall - Comodo
To: Sasha
Sent: Monday, November 08, 2005 7:15 AM
Subject: Re: Need brief info regarding Comodo firewall [193973:210450]


Hi Sasha,

Product will remain free you dont need to pay but as you said you have to re-registed.
you dont need to pay or switch to any other product.

Regards
Allan
Technical Support

----- Original Message -----
From: "Sasha" <hidden e-mail address>
To: "Desktop Personal Firewall - Comodo" <personalfirewall@comodo.com>
Sent: Tuesday, November 08, 2005 8:05 AM
Subject: Re: Need brief info regarding Comodo firewall [193973:210450]


Thank you Allan, I really appreciate your help. It is so wonderful to know that there actually are some other great companies, offering a free product and best of all, such a professional product above all. Also, technical support is free just like we provide help and support in avast! forums. avast! antivirus also provides phone and e-mail support even for freeware edition (avast! Home Edition).

Thanks again and have a wonderful day Allan !
Regards,
Sasha

Should you have any queries, you all are free to contact them through this e-mail address:

personalfirewall@comodo.com (Tech Support)
Title: Re: comodo personal firewall
Post by: BanziBaby on November 08, 2005, 08:56:45 PM
I really wanted to try this firewall, unistalled Outpost & cleaned up the registry for leftovers, rebooted & tried to install this firewall but it just wont install for me on XP SP2, once the blue bar on the configuring windows installer screen has reached 100% it always then displays a error dialog saying

1609 : Unable to create installdriver instance

Emailed the support & explained what was happening & the guy sent me a file to replace (pity i cant install it as it wont let me actually install the firewall) He then asked me to redownload it which i did using three different browsers (IE, FF & Opera) just to get the same error message.

Untill i get this fixed i am testin the lastes Kerio, just wondering if any of U folk have had the same prob.

BaNzI ;D
Title: Re: comodo personal firewall
Post by: neal63 on November 08, 2005, 09:20:58 PM
No, I am using Comodo, WinsXp Home, SP2 and had no problem downloading Comodo. Using it now and it works fine.
Title: Re: comodo personal firewall
Post by: Cloussau on November 08, 2005, 09:37:16 PM
@ Banzi,
Is it possible that you might be using some third party protection on your firewall, Process Guard comes to mind as one possibility of why an uninstall might be disrupted.
Title: Re: comodo personal firewall
Post by: BanziBaby on November 08, 2005, 11:14:42 PM
@Cloussau

I have disabled everythin from loading at boot time including NOD32, Ewido & PG, even unticked every option in PG & rebooted but i still get that error everytime.

I was watching the setup using Process Explorer, when i double click the setup file, both it & the MSIExec are loaded then as the blue configuring MSI installer progress bar get to full it then vanishes & the setup gives me that error, im thinking it might have something to do with the Installshield IDriver app as that seems to run & i then see both MSIexec & setup gettin access denied in PE.

At the mo i got on Kerio 4x, when that installs it does the configuring MSI installer, the bar gets to 100% & i then see it saying extracting Kerio.msi & it then installs perfectly.

I also noticed in the program files\common files\intsallshield\etc.. folder there is a update service folder, tried running that to see if it would update my files but nothing happens.

It's starting to do my head in as i really want to test this firewall. I have emailed support again asing if they have a seperate comodo.msi file, hopefully they can provide this tomorrow.

The strange thing is im trying to install it under the admin account but it still wont let me even install it ::)

BaNzI ;D
Title: Re: comodo personal firewall
Post by: Lisandro on November 09, 2005, 01:02:25 AM
I have disabled everythin from loading at boot time including NOD32, Ewido & PG, even unticked every option in PG & rebooted but i still get that error everytime.
Including services? I think NOD32 (services and residents) are incompatible with avast.
ProcessGuard act in a low level and only uninstalling it will give me the final sure it's not interfearing.
Title: Re: comodo personal firewall
Post by: AvastForever on November 09, 2005, 01:08:23 AM
This sound stupid. But how does this firewall update itself, you have to do or the firewall does like ZA? and you cant use Process Guard combine with this firewall?
Title: Re: comodo personal firewall
Post by: neal63 on November 09, 2005, 03:54:26 AM
If you go  HERE  (http://www.personalfirewall.comodo.com/) it may answer your question on that page.  ;)
Title: Re: comodo personal firewall
Post by: szc on November 09, 2005, 04:09:40 AM
If you go  HERE  (http://www.personalfirewall.comodo.com/) it may answer your question on that page.  ;)

Exactly... and here is a quote from the page Neal just gave you link for...

Quote
...
...
...
Stay protected against new threats via automatic online updates
...
...
...
Title: Re: comodo personal firewall
Post by: stevejrc on November 09, 2005, 07:55:27 PM
tried it, way too complicated for me, back to sygate - until I have a week to work out which UDP/TCP connections are needed for all my applications.  :o

although the wizards work, internet explorer still asked for some other UDP requests, none of which I ever saw in sygates traffic log where only UDP 53 was needed for DNS, which was handled by smartDNS option. Comming up  with loads of ports and protocals is ridiculous without any idea of what they are, that would lead to allowing all sorts of theats or stopping applications connecting.
Title: Re: comodo personal firewall
Post by: polonus on November 09, 2005, 10:45:28 PM
Hi stevejrc,

And good what you say, but you cannot solely rely on FIREWALLS for security, read this: http://sebsauvage.net/punching/ about "tunneling" and how you can punch holes through a firewall, which under circumstances is not allowed in many countries in the world.

greets,

polonus
Title: Re: comodo personal firewall
Post by: AvastForever on November 10, 2005, 06:45:23 AM
Hey guys:

  But i just notice something i think all you people are saying that ZA does tell when tooleaky.exe is going to start. But with process Guard it will ask you if you want to start tooleaky.exe or not. Since Process Guard does not allow any programs starting without your concent.I just try it. So i guess Process Guard make up for what ZA misses.
Title: Re: comodo personal firewall
Post by: szc on November 10, 2005, 12:37:41 PM
Exactly, but again... why having millions of different security programs installed if you can have just one that does all those things by default. Even wonderful Kerio firewall recognizes tooleaky.exe and doesn't need any third party application to stop it instead of firewall, which is btw installed for those things in the first place...

Having tens of security programs installed on the same machine will turn your machine in a fortress, true... but let's ask ourselves... how much of a system resources will left for other tasks... some productive tasks you have to make with your machine...  ;)
Title: Re: comodo personal firewall
Post by: polonus on November 10, 2005, 02:42:23 PM
Hi S.Z.Craftec,

I agree with you there. Normally you only need  one resident AV product, one resident FW, one resident System Monitoring Program, additional programs should not be in startup like  AS, AT, HJT etc, and some of your security can be browser in-built add-ons. This is a multi-layered approach that should not be too heavy on your CPU, half of the load is windows dependant (iosubsys) anyway, check with ASVIEWER to see all your autostart files, quess you have some 100.
Title: Re: comodo personal firewall
Post by: szc on November 10, 2005, 04:34:02 PM
...
...
...
check with ASVIEWER to see all your autostart files, quess you have some 100.

Nope... with SHOW SERVICES enabled it shows 75 although it's pretty close to 100... and when that one is disabled (by default btw) it shows only 28. I'm trying to keep everything and anything not needed out of the startup... those things that simply must be there, well, what can we do... See screenshot:

(http://img477.imageshack.us/img477/9602/untitled34gi.jpg)

But I mostly use AutoRun (Sysinternals)

(http://img253.imageshack.us/img253/1913/untitled36kt.jpg)
Title: Re: comodo personal firewall
Post by: Spiritsongs on November 10, 2005, 08:09:10 PM
 :) Was wondering if Comodo Personal Firewall & Comodo
     Trust Toolbar is from the same company ? Since the latter
      is listed TWICE in SpywareBlaster's IE "section" as an
     "Active X" to be blocked, I wonder as to the creditability
      of the firewall !?
Title: Re: comodo personal firewall
Post by: szc on November 10, 2005, 08:14:23 PM
Why not visiting their official web site and check it over there ?

http://www.personalfirewall.trustix.com

As far as I know, that company is quite some time in this business... it's just they are new when it comes to personal firewalls.
Title: Re: comodo personal firewall
Post by: cyfer on November 11, 2005, 12:34:52 AM
:) Was wondering if Comodo Personal Firewall & Comodo
 Trust Toolbar is from the same company ? Since the latter
 is listed TWICE in SpywareBlaster's IE "section" as an
 "Active X" to be blocked, I wonder as to the creditability
 of the firewall !?

No, Comodo Trust Toolbar is not related with Comodo Personal Firewall.  They have was is called "Trustix™ Personal Firewall".


Look here: http://www.trusttoolbar.com/products/index.html
Title: Re: comodo personal firewall
Post by: RNfromTN on November 11, 2005, 01:18:18 AM
I don't know if any of the other comodo users have come across this or not,but comodo shows as a trial version when running under a limited user account.I emailed support but but no reply after 2 days.So I inserted the original license key and now is full subscription . Just thought this was odd to have to do.FYI
Title: Re: comodo personal firewall
Post by: StopMe on November 11, 2005, 02:08:53 AM
Yeh, that happen to me, you have to re-enter your Key for that account.  It can be the same key that you got first time.
Title: Re: comodo personal firewall
Post by: hipgnosis on November 11, 2005, 02:56:52 AM
:) Was wondering if Comodo Personal Firewall & Comodo
 Trust Toolbar is from the same company ? Since the latter
 is listed TWICE in SpywareBlaster's IE "section" as an
 "Active X" to be blocked, I wonder as to the creditability
 of the firewall !?

No, Comodo Trust Toolbar is not related with Comodo Personal Firewall.  They have was is called "Trustix™ Personal Firewall".


Look here: http://www.trusttoolbar.com/products/index.html


There is a product on the Comodo web site called "Trusttoolbar".  Click the link at the top of the Comodo web page that says "Free Products"....3rd item down the list.

Not sure if this is the same product that's listed in Spyware Blaster ......if it's not it was a bad choice of names.    :)

Title: Re: comodo personal firewall
Post by: justin1278 on November 11, 2005, 04:26:00 AM
i have tryed a few antispy programs that classified trust toolbar as a browser hijacker. I e-mailed there support and they said that some spyware programs cosider this spyware because it is so integrated in to IE and that they were talking to the antispyware vendors to get it resolved. I have researched the Comodo compnay and they seem to be a trusted company. Also about the trustix personal firewall i believe that Comodo bought trustix out and remade the trustix into comodo personal because the trustic personal is at 2.0 and comodo personal is at 1.1  plus the install pack for the trustix personal firewall installs the comodo personal firewall.
Title: Re: comodo personal firewall
Post by: polonus on November 11, 2005, 09:43:04 PM
Hello firewallers,

Here is where you can test your firewall:
http://www.firewallleaktester.com/leaktest3.htm

Try it,

greets,

polonus
Title: Re: comodo personal firewall
Post by: Lisandro on November 11, 2005, 10:19:35 PM
http://www.firewallleaktester.com/leaktest3.htm

 ???
Title: Re: comodo personal firewall
Post by: polonus on November 11, 2005, 11:02:23 PM
Yes Tech,

I got the same result for the hyperlink to the download of the vulnerability. The test is for a hole in certain firewalls (ZoneAlarm, Kerio e.a), and in that case it is understandable that Dr. Web classifies is as such, while on the other hand it is presented as a test and in this form a harmless test in its results.

Russian virus philosophy sometimes goes according these lines. Once I remember there was an animated graphic, simulating deleting a hard disk. Russian virus scanners alarmed, because people could panic from watching it (and get a heart attack), while  misinterpreting what went on: a harmless joke others would think..
The animation could not do much  harm, but some people could not discriminate between the real thing and this so-called joke. But if the basic line is run no risks, I give Dr. Web a good mark for attentiveness. A hole is a hole, test or no test.

The only thing that prevents firehole is a system monitoring program: see: http://diamondcs.com.au/processguard/index.php?page=attack-hooks
greets,

polonus
Title: Re: comodo personal firewall
Post by: szc on November 11, 2005, 11:10:23 PM
Yes Polonus is 100% right...

I just tested Kerio on my primary computer and this is the result (read: I'm protected):

(http://img453.imageshack.us/img453/2967/untitled94qe.jpg)
Title: Re: comodo personal firewall
Post by: Lisandro on November 11, 2005, 11:12:32 PM
The only thing that prevents firehole is a system monitoring program: see: http://diamondcs.com.au/processguard/index.php?page=attack-hooks
Or PrevX (free) or System Monitor (free), better than PG in my opinion.
Or Kerio Firewall, or Outpost (Pro)  8)
Title: Re: comodo personal firewall
Post by: szc on November 11, 2005, 11:28:34 PM
Tech, do you still have those stupid freezings with Kerio ? I have to say that I still have but all those are 99% controlable. 1% is when I use Azureus or LimeWire for example... I am aware that I am not the only one, and many reports have already been claimed... they (Kerio people) said everything is fixed with version 4.2.2, but it's not... I still have those Kerio GUI problems when trying to open it while Azureus or Limewire is working in the background. Sometimes parts of the Kerio GUI are just blank, you can see desktop through them...

The good thing is, never happened to freeze completely. It lasts only for 30 seconds, maybe 40 and then everything is fine... but I know it's not fine, and they should finally do something regarding that...

Cheers !
Title: Re: comodo personal firewall
Post by: Lisandro on November 12, 2005, 01:43:45 AM
Tech, do you still have those stupid freezings with Kerio ?
Not with Kerio, but Kerio GUI itself. It (the window of setting) is what freezes for me...

I still have those Kerio GUI problems when trying to open it while Azureus or Limewire is working in the background. Sometimes parts of the Kerio GUI are just blank, you can see desktop through them...
Yeah, exactly, I can see the desktop or any other application through it...  :P

The good thing is, never happened to freeze completely. It lasts only for 30 seconds, maybe 40 and then everything is fine... but I know it's not fine, and they should finally do something regarding that...
For me, only closing the GUI I can handle with this. After booting, maybe it works, maybe it doesn't  :P
Title: Re: comodo personal firewall
Post by: polonus on November 12, 2005, 02:27:17 PM
Hi folks,

Unsafe firewalls are unsafe because of trivial exploits or masquerade within the same or any directory: look here at a list: http://grc.com/lt/scoreboard.htm.
Some alterate between safe firerwalls every couple of months: ZoneAlarm for a couple of months, Sygate for a couple of months. Never use two main FW's at the same time. They are like guard dogs in front of the house and start to fight among each other rather than keeping the house safer.

greets,

polonus
Title: Re: comodo personal firewall
Post by: szc on November 12, 2005, 02:32:51 PM
Polonus I don't have two firewalls installed... see here in this reply of mine:

http://forum.avast.com/index.php?topic=17020.msg147118#msg147118


Quote:

...
...
...I have to say that I am unbelievable happy with this firewall so far... in combination with my new Linksys befw11s4 v4 wireless router/firewall it gives a wonderful protection. Also, no slow down after instaling Comodo firewall at all. On my other computer after complete uninstalling avast! and Kerio, boot time went down to unbelievable 8 seconds, like it was before... after installing Comodo...
...
...

I use Kerio on my primary desktop machine and Comodo is installed on my new laptop Gateway M675 17" wide screen (present from my beloved wife btw, hehe)
Title: Re: comodo personal firewall
Post by: rdsu on November 12, 2005, 03:47:24 PM
Someone knows if this firewall have ARP (http://en.wikipedia.org/wiki/Address_Resolution_Protocol) protection?
Title: Re: comodo personal firewall
Post by: polonus on November 12, 2005, 03:56:53 PM
Hi S.Z. Craftex,

I was just speaking in general. My point here is that a FW these days is part of a layered form of protection. That there are people that change FW's once in a while, just like it is bad to eat jam every day. I think that in-browser security measures are becoming more and more important. But it is a constant struggle between the security aware and the e-commerce boys. The first to find better ways to avoid crap and others to find ways to surpass detection (tunneling, webbugs, dart technology, autonomous processes), and rather do this invisible to the consumer all together (Jericho forum enthusiasts). Look with TDI mon what happens just after you open your browser and do nothing. Open TDI mon log and look at the results, then you will see who is monitoring your online activities.

VaMPiRiC_CRoW,

About ARP poisoning and protection against this see this thread:

http://www.governmentsecurity.org/archive/t14083.html

Yes, ProxyARP is found on the CD of this firewall. Or do it like this:
Router (config-if)# ip proxy-arp . So later you can see the dynamic address with arp -a

interface: 10.0.0.151 ---0x10003
Internet-address                fysical address                      type dynamic
10.0.0.138                          00-xx-xx-xx-xx-xx       

The danger of arp is a arp-redirect and you have to install arpwatch -1 r10 , but all these things are network related things.         

greets,

polonus
Title: Re: comodo personal firewall
Post by: rdsu on November 13, 2005, 03:04:13 AM
Thanks for the info, Polonus ;)
Title: Re: comodo personal firewall
Post by: romanito on December 02, 2005, 12:30:13 PM
I try to install comodo firewall but at the end of installation (rolling back)  I get an error that i have not  privilege and tell me to contact support.
I try to contact comodo support but without success.They ignore me.
I format my disk and install comodo just after install xp sp2 and get the same error?????
Very strange
Did someone allready have this error ?

Romanito
Title: Re: comodo personal firewall
Post by: szc on December 02, 2005, 01:18:17 PM
Do you have another firewall installed and not removed prior to installing Comodo ?

Also, you have to have Administrator rights on your account to be able to install it properly. Log off, and log back in under some account with administrator rights and install it from the scratch.
Title: Re: comodo personal firewall
Post by: romanito on December 02, 2005, 02:40:01 PM
i just have one account, administrator.
I didn´t have a another firewall (install comodo firewall was the first thing I do after format and install xp sp2 again).
I install thousands softwares in my PC, never have this error.This error was a comodo error, not a windows error. And the error tell me is can be a privilege error.It´s not sure.

Romanito
Title: Re: comodo personal firewall
Post by: Lisandro on December 02, 2005, 02:51:08 PM
Comodo MAY have issues concerning running between the Administrator account and the Non Administrator with WinXP?
Can anybody confirm this?
Won't the firewall protect the computer while running a non-administrator account?
Title: Re: comodo personal firewall
Post by: szc on December 02, 2005, 03:19:58 PM
i just have one account, administrator.
I didn´t have a another firewall (install comodo firewall was the first thing I do after format and install xp sp2 again).
I install thousands softwares in my PC, never have this error.This error was a comodo error, not a windows error. And the error tell me is can be a privilege error.It´s not sure.

Romanito

Well if it's a Comodo error how come none of us got that error and we installed it without a single problem ? It must be something connected to non-admin account issues even though you mentioned your account is Administrator account. By the way, having just one account and it's Administrator account is not most secure way to browse the internet... you are much more vulnerable than browsing the net under some account with limited rights.

Also, I know that whatever issue I had to ask, Comodo tech support answered almost immediately... this is their support e-mail in case you used some other:

support@comodogroup.com
Title: Re: comodo personal firewall
Post by: Lisandro on December 02, 2005, 03:23:50 PM
Sasha, a very brief comparison of ZA and Comodo development rates.
Do you think Comodo is more trustable (easy update, real protection, frequent upgrades, features) than ZA?
Title: Re: comodo personal firewall
Post by: szc on December 02, 2005, 03:34:22 PM
Comodo firewall is great product but I still think they need to work on it. No software succeeded over the night, especially not security related software tools. People don't trust to new products that easy, and that's the biggest problem.

ZA was always one of the best firewalls out there. Of course with some issues and minor problems, but still I strongly believe they are on the top of the chart whatever some other people may think.

At the moment I use Kerio on both of my computers (desktop and notebook), so I can't tell you much about Comodo at the moment, especially not about latest version of Comodo. I may try it again in the future... who knows what future brings. Maybe some well known company releases something better in the mean time, who knows...  ;)  ;D
Title: Re: comodo personal firewall
Post by: romanito on December 02, 2005, 05:55:23 PM
hello  S.Z.Craftec

Thanks for your help

Quote
Well if it's a Comodo error how come none of us got that error and we installed it without a single problem
i agree and because of that i format my disk and install again xp sp2 and I install comodo before any software but I have the same error.

Quote
Also, I know that whatever issue I had to ask, Comodo tech support answered almost immediately... this is their support e-mail in case you used some other:
with the support online I have this :
Quote
> Romano: I have a problem with the installation of comodo firewall.I
allways get this error: rolling back ......not enough privilege....
> > You are now speaking with Peter of Comodo Support.
> > Peter: Hello Luis
> > Romano: hello
> > Peter: Ok, Please send an Email at supprt@comodo.com and we will need to
forward this to our developer to look in to it
> > Peter:  :)
> > Romano: ok thanks
???

And with the email support i get this:
Quote
Hi,

We have escalated this issue to the concerned department and they working in
that,i will get back to you once
its sorted.

Regards
Allan
Technical Support
I still wait


Quote
By the way, having just one account and it's Administrator account is not most secure way to browse the internet

Thanks I will work on that

Quote
It must be something connected to non-admin account issues even though you mentioned your account is Administrator account

How can I verify This??
Title: Re: comodo personal firewall
Post by: Lisandro on December 02, 2005, 06:04:55 PM
Quote
It must be something connected to non-admin account issues even though you mentioned your account is Administrator account
How can I verify This??
It seems a Comodo error and not your Windows installation... if you never had a non-administrator account, how could it being messing the firewall installation?
Title: Re: comodo personal firewall
Post by: szc on December 02, 2005, 06:31:25 PM
Hi Romanito,

When it comes to Comodo's Technical support, situation is pretty much exactly the same as avast! technical support. We do this for free, and there are many, many requests at the same time. I am sure Allan is working on that issue, and soon he will get back to you with some answer. He was the guy who contacted me as well when I had some questions. First time it was pretty fast, second time when I asked something, it took few good hours, but no one can and should expect to get an answer in next few seconds. Sometimes it takes more than few days to get first place in waiting line. There is unbelievable huge number of users with all kinds of requests, and just few individuals who are trying to please everybody. I am sure your issue will get their attention soon, and someone will eventually answer you.

Cheers !
Title: Re: comodo personal firewall
Post by: Lisandro on December 02, 2005, 08:38:49 PM
I install thousands softwares in my PC, never have this error.This error was a comodo error, not a windows error. And the error tell me is can be a privilege error.It´s not sure.
Romanito, I've tried and I get the same error  :P
I think the problem could be the folder where you're installing. Are you using the default one?
If tested three times and nothing (tryed both the default and no-default folder).
Nothing...
I've come back to ZA... what can I do...?
Title: Re: comodo personal firewall
Post by: szc on December 02, 2005, 08:54:11 PM
Well then... maybe they are really having some problems with latest build. I have to repeat, I never tried last one, so I don't know if that same error would happen here just like on your computers. But sure, you should contact their support and see what they have to say. Now this is not only one isolated case... there are two exactly the same reports... let's see what they have to say about it.
Title: Re: comodo personal firewall
Post by: StopMe on December 02, 2005, 11:25:14 PM
Comodo MAY have issues concerning running between the Administrator account and the Non Administrator with WinXP?
Can anybody confirm this?
Won't the firewall protect the computer while running a non-administrator account?

Comodo will still protect users with limit accounts, however Comodo only protect one active account at a time and you have to insert your Key Again once you log in to a different account.
Title: Re: comodo personal firewall
Post by: Lisandro on December 03, 2005, 01:01:05 AM
Comodo will still protect users with limit accounts, however Comodo only protect one active account at a time and you have to insert your Key Again once you log in to a different account.
Thanks Turkey.
Can you tell me if I'll have to do this each time or just in the first one the user log into a specific account?
I'm thinking I won't be able to use the 'swith feature' of Windows to change the logged user...  ::)
Title: Re: comodo personal firewall
Post by: RNfromTN on December 03, 2005, 02:48:39 AM
Comodo MAY have issues concerning running between the Administrator account and the Non Administrator with WinXP?
Can anybody confirm this?
Won't the firewall protect the computer while running a non-administrator account?

Comodo will still protect users with limit accounts, however Comodo only protect one active account at a time and you have to insert your Key Again once you log in to a different account.
   This bug has been fixed in latest version   1.1.002
Title: Re: comodo personal firewall
Post by: StopMe on December 03, 2005, 03:32:44 AM
You mean the one that deals with the License Key?  Cause I have the latest version of Comodo and I still need to log off from my first account to use the firewall for my second one. 

Comodo will still protect users with limit accounts, however Comodo only protect one active account at a time and you have to insert your Key Again once you log in to a different account.
Thanks Turkey.
Can you tell me if I'll have to do this each time or just in the first one the user log into a specific account?
I'm thinking I won't be able to use the 'swith feature' of Windows to change the logged user...  ::)

I'm not really sure what you mean exactly but all I can say is I can only have one account active but I still need to use my Key three times on my other three accounts each year unless Comodo fix it already in the last update.  :-\ 
Title: Re: comodo personal firewall
Post by: Lisandro on December 03, 2005, 12:22:35 PM
This bug has been fixed in latest version   1.1.002
I couldn't even install this version  :P
Title: Re: comodo personal firewall
Post by: chat1der on December 03, 2005, 10:53:06 PM
I tried installing the firewall today for the first time and got

Error -1608: Unable to create InstallDriver instance

I followed ALL the steps in this article

http://consumer.installshield.com/kb.asp?id=Q108440

but no luck.

Any other suggestions?

Thanks!
Title: Re: comodo personal firewall
Post by: szc on December 03, 2005, 11:00:20 PM
Suggestion is very simple. You should contact their technical support. This forum deals with avast! issues and we are trying to help and pelase everybody with their questions. There is literally thousands and thousands of people requesting help and there is just few of us trying to please everybody.

Again, Comodo technical support can be reached through this e-mail:

support@comodogroup.com

or this one:

support@comodo.com

ATTN: to Allan
Title: Re: comodo personal firewall
Post by: Lisandro on December 04, 2005, 04:15:18 AM
Quote
New version of Comodo Firewall... http://www.personalfirewall.trustix.com/
I can't install it for sure...
I've sent emails to their technical but the first (second, third... fifth) tentative let me think it's not a good one... I couldn't even manage it to install... there isn't a forum, a FAQ or a knowledge base to search for info...  :P
Title: Re: comodo personal firewall
Post by: szc on December 04, 2005, 04:24:16 AM
If you have one problem you can't say it's not a good firewall. That's what many keeps saying for avast! when they try it for the first time and experience so many problems... we are here to help them. Sure there is a free forum support, but that doesn't necesarily comes from avast! itsels, but from us Tech. We are the ones that spends so much time in here trying to unselfishly help everybody (I hope we are succeeding in that)... that's up to us.

Comodo doesn't have forum but that's just because they just started to deal with that product. If it has problems and issues (although I haven't noticed those you mentioned, oh yes... btw, I just tried new version on my laptop and it works like a charm...), so we need to work on those problems and inform those developers. That's the best way to deal with those things. As I said, there is just few people (tech support) at Comodo, and I am sure many people already send hundreds of requests. We have to understand them a bit. They are dealing with unbelievable amount of information right now...
Title: Re: comodo personal firewall
Post by: BanziBaby on December 04, 2005, 12:21:05 PM
To anyone gettin the Error -1608: Unable to create InstallDriver instance error

Follow the advice on this installshield link

http://consumer.installshield.com/kb.asp?id=Q108322

By deletin & the reinstallin the installshield runtime version 7, 7.01, 8 & 9 ( i downloaded the ISScript.exe & the various version of the runtime) i was then able to install comodo

U should have a 7, 8 & 9 folder in Ur C:\Program Files\Common Files\InstallShield\Driver dir.

It seems that if U dont have the various IDriver.exe installshield runtime then comodo is unable to update or even install it resultin in that error message.

BaNzI ;D
Title: Re: comodo personal firewall
Post by: nana8 on December 04, 2005, 08:48:15 PM
Well, I had sygate with my avast but since sygate will be no more I decided to try comodo firewall. It seems easy but after doing shields up I'm uneasy with it. It says all ports are closed but not stealth. Now I'm a dummy that really does not understand what the heck I'm looking at when it comes to  most of this stuff and I'm not sure what IP address they are checking. I didn't seem to have this trouble with sygate but I'm not sure I ran shields up after going DSL. I have Comodo set at Custom level do I need to bump it up to high? If I do bump it up will it lock up my computer. When I had symantec's internet security and zone alarm (not at the same time) and they were set to high I couldn't even boot my computer. Any Advice or help??? Thanks ~Nana~ :-[
Title: Re: comodo personal firewall
Post by: justin1278 on December 04, 2005, 09:12:17 PM
the high setting is more for like if you are under attack. Kind of like ZA block all internet traffic feature.
Title: Re: comodo personal firewall
Post by: RNfromTN on December 04, 2005, 11:13:32 PM
Hi nana8,are you using a router or hardware firewall now that you're on dsl connection?Comodo will pass shields up as 100% stealth.Custom level setting is correct for normal usage.
Title: Re: comodo personal firewall
Post by: nana8 on December 05, 2005, 02:58:44 AM
I have a DSL router thru sprint/earthlink  but am unsure about router firewall. I don't think it has a firewall.  Have had sygate firewall for quite a while but now that it is no more and I had read that Comodo would be a good one and thought I would try it out. The shields up keeps coming up port are all closed but not stealth. Have no idea what to do???? ~Nana~
Title: Re: comodo personal firewall
Post by: RNfromTN on December 05, 2005, 03:12:13 AM
Hi nana8,I believe your problem is with your router.Did you get any instructions with it on how to configure it at setup?I use a netgear router /firewall and can pass shields up without software firewall.I use comodo to control outbound.
Title: Re: comodo personal firewall
Post by: nana8 on December 05, 2005, 01:17:39 PM
Thanks for answering again! Appreciate it! No I didn't get any instructions on how to configure the router, just the set up instructions they send when you set up DSL. And I think Comodo is seeing my router and not getting to my computer but I just don't know how to tell. How does a dummy like me find out what my ISP address is??? And then if that is the case how do I configure my outbound? I really don't know what I'm looking at when it comes to TCP and the UDP that is listed on Comodo. Thanks for any advice and help! ~Nana~
Title: Re: comodo personal firewall
Post by: BILL G on December 06, 2005, 01:46:54 PM
   
    NANA8   
   
    Try MY COMPUTER - CONTROL PANEL - NETWORK CONN. - LOCAL AREA CONN. - STATUS - SUPPORT
Title: Re: comodo personal firewall
Post by: nana8 on December 06, 2005, 07:25:49 PM
Thanks Bill, Another person told me where to look and the host # they are giving me is not my IP. Still don't understand what that means but am working on it. ~Nana~
Title: Re: comodo personal firewall
Post by: StopMe on December 07, 2005, 05:46:11 AM
Hey for those who use Comodo, have you guys check your alert logs lately?  The only alert logs I'm getting are high and they're from Shields Up Test. 
Title: Re: comodo personal firewall
Post by: szc on December 07, 2005, 01:13:09 PM
Take a look at this reply Polonus made in one of those threads:

http://forum.avast.com/index.php?topic=17540.msg149466#msg149466

Direct link to the actual page:

http://www.samspade.org/d/firewalls.html

Quote I'm referring to:

Quote
...
...
...If you want to play with a piece of windows software that makes you click all over the place, there's always minesweeper.

If you'll feel safer sleeping at night knowing there's a 'personal firewall' running on your system, then install one. As long as you pay no attention to the "hack attacks" it reports it's better than nothing. A free one, ideally, as few of them are worth paying for. Turn off all the alerts and logging - you'll just waste your time (and, more importantly to me, my time and the time of other network administrators your complaints go to) increase your blood pressure and provide no benefit to you. If you really want to leave them turned on and see where traffic is coming from, feel free, but remember that most of the traffic you see is harmless, and that even if it isn't harmless it can't affect your system (if it could, it wouldn't be logged). Oh, and try not to waste admins time with frivolous complaints...
...
...

That is sooo true.
Title: Re: comodo personal firewall & TdiMonitor
Post by: polonus on December 07, 2005, 01:33:10 PM
Hello Turkey and Sasza,

To know what your applications are doing when they go out on the net, there is a beautiful free monitor tool by the name of TdiMonitor. Download it for free from here: http://www.sysinternals.com/Utilities/TdiMon.html. You start for instance TDIMonitor, and then only open your browser, do nothing for 3 minutes, and safe the log, and analyze (what outbound URLs you find, tec. etc).. This will be worth you while. Also use the tools you have under Dos for you like netstat (netstat -a & netstat - an, netstat -r) or arp -a etc. Most important in this respect is using common sense, disable file sharing, do not run services that you can do without.

greets,

polonus
Title: Re: comodo personal firewall
Post by: szc on December 07, 2005, 01:55:44 PM
Yes disabling file sharing is wonderful thing, especially because many (not all) people like to make all of their folders shared if they are on some kind of home networks, so they can easily share files among those computers on their network. I don't so that... I have my file sharing enabled, and only folder that is shared is my D:/Temp/ folder which is by the way always totally empty. When I need to transfer something from my desktop PC to my notebook, I simply put it in that folder, pick it up on my Notebook and immediately erase it. That's how I usually do when it comes to file sharing. I don't have to share a lot of things among computers on my network, but sometimes I have some things I have to transfer from one to another.

Also, no matter how secure it is, it seems like wireless never will be as secure as "normal" connections are. Anyway, I use my wireless connection just to connect my Notebook to this network when I'm working in another room or something. I made sure my connection is WEP secured, and 128-bit encrypted with 26 hex digits password. I also restricted access to others, so the only MAC address allowed, is the one associated to my Notebook.  ;D

Just as my friend Polonus mentioned... common sense is the attribute we all should posses.

Happy surfing people !
Title: Re: comodo personal firewall
Post by: Umath on December 07, 2005, 02:59:26 PM
Quote I'm referring to:

The quote does not provide helpful information for beginners since almost all of them are just sarcastic remarks on them.  :P

How about trying the app polonus linked and find if the remarks are true or not by yourselves?  TDIMon is definitely a good app but probably the overwhelming info likely scares off those who touch firewalls first time.  IMO, free personal firewall apps such as Sygate and Kerio rather manage to offer reasonable information without getting too verbose.
Title: Re: comodo personal firewall
Post by: szc on December 07, 2005, 04:11:55 PM
To tell the truth, I don't see sarcasm in this line (I also marked it in blue, so it means I was trying to draw people's attention to it):

Quote
...If you really want to leave them turned on and see where traffic is coming from, feel free, but remember that most of the traffic you see is harmless, and that even if it isn't harmless it can't affect your system (if it could, it wouldn't be logged)...

That is so true. And besides, you mentioned those new firewall users. What concretely can they do even if they find something in their log files ? As that guy said, even if there was some kind of attack that could affect their system, nothing would be logged... on the other hand looking at those endless logs will most likely just waste your precious time. This is just mainly in statistics purposes, but of course logging can be very useful when troubleshooting some problems and issues. I ask again, how many people reported in this forum that they are/were under some nasty attack ? None... or mostly all those were just false alarms, nothing else.
Title: Re: comodo personal firewall
Post by: Umath on December 07, 2005, 04:25:04 PM
Hmmm…my first firewall was Kerio but I rather searched the net than asking in forums.  So, probably, story differs depending on the personalities.  I am quite sure the comment is not helping, though…
Title: Re: comodo personal firewall
Post by: polonus on December 07, 2005, 04:29:20 PM
Dear Umath,

Well I think "beginners" is the phase from where we all start here, also in FW'ing.
This is so with myself as well, what I learned during the process of trying to make over 1000 postings is amazing. If you stay long enough in a forum like this, and really interested to learn, every n33b can be turned into a g33k. You do not have to know all that is running under the hood, but enough to evade a disaster.
I did not know much about security as I started to come here first, but was very motivated after a re-install because of a major virus accident, and I like to thank all the forum members who brought me where I am now. We have a lot of expertise here, and we learn everyday.
I think Sasza is not sarcastic when he tells like it is. There are still people around that think that AV products stop virus. That is not true. AV products react, they save you from harm after the fact, and if there is a zero-exploit, no AV-scanner or FW can help you, but your security policy and your brains can protect you in such a way that even the zero-day exploit cannot befall you. I think it is a good thing that Sasza unravels some of these security myths. Of course you cannot survive for half an hour without a good AV and FW, but they DO NOT IMMUNIZE, and they do not harden.

greets,

polonus
Title: Re: comodo personal firewall
Post by: szc on December 07, 2005, 04:55:57 PM
Exactly my thoughts Damian... exactly what I meant when posting up there. No one is being sarcastic especially not in computer security related forum like this one is. I live with this forum, and number of my posts doesn't represent anything, but it tells that I'm here for so long, and if nothing else that I've learned well how to communicate with newcomers, regardless are they total newbies or some experienced experts which still like to come here and extend their knowledge.

I wouldn't make jokes with these things ever, and all I said up there is common sense. It's nothing like I said: "...people do not use firewalls or antiviruses...", or do you my friend Umath see it like that ? If your answer is yes, then you simply missunderstood me. All I was saying is, logging doesn't help you much when it comes to firewalls. For example, literally millions of users are using ZA all around the world, and they never ever felt any need to take a look at their log files... simply because most of them don't even understand what's inside. So why bother then ? Why to complicate something that's already pretty much complicated enough ? They need something simple and effective, and that was my point.
Title: Re: comodo personal firewall
Post by: Umath on December 07, 2005, 06:05:54 PM
Oh...I found the quote sarcastic not Sasha.  I was just curious of why Sasha found the article interesting, which I understand now.  Nothing serious.  ;)

Talking of lack of knowledge, after my previous post, Kerio warned me that my browser is accessing a site at remote port 80, which struck me odd since no apps but Web Shield is allowed to use the port.  Well, to be honest, I even searched the net about the site, which was 70.84.157.228...  Yes...because of the good job by Avast team, I rarely remember the old days when Web Shield clashed daily.  Well, this is how I wasted my time today.  :-[  I keep learning and...forgetting. :P
Title: Re: comodo personal firewall
Post by: szc on December 07, 2005, 06:25:12 PM
...
...
...I keep learning and...forgetting. :P

Haha, that's how we all live this life, isn't it ? But the good thing is... we keep learning till the very last breath.
Title: Re: comodo personal firewall
Post by: polonus on December 07, 2005, 08:03:05 PM
Hi Umath,

Now go to this site here: http://online.drweb.com/?url=1
Now give in this URL to check: 70.84.157.228, and now you have checked it before you actually clicked the link or went there. But this cannot be, because it is sm00.avast.com. You cannot fetch it because it is an absolute URL. Now give in http://sm00.avast.com, and you read OK file size 25632 bytes, archive HTTP OK script 0 OK, JavaScript 1 OK sm00.avast.com OK

This is realtime protection, you pre-checked it against the update servers of Dr. Web's in St. Petersburg to see if it is OK. They are updated twice a day or more.
If you would go to the link after that, you would have made a decided decision. This is better certainty than a FW can give you, and even like a live scan, because it is a PRE-SCAN. Now you learn to think security,  8) it is not difficult. It is only a constant attitude, my friend.

greets,

polonus
Title: Re: comodo personal firewall
Post by: Umath on December 08, 2005, 12:51:06 PM
I checked it with whois search, finding the domain name as well as how silly I was.  I had configured my firewall to make sure that Web Shield keeps checking all the http connections, which totally slipped from my mind at that time.

Now go to this site here: http://online.drweb.com/?url=1

I presume the site uses the same engine with the Dr.Web browser plug-ins (http://info.drweb.com/show/2653), which you occasionally recommend.
Title: Re: comodo personal firewall
Post by: polonus on December 08, 2005, 02:16:05 PM
Hi Umath,

Yes it uses the same, and regularly updated as you can see.
The only difference here is you have to fill in the hyperlink address yourself (cut & paste for instance), and you can use this page for scanning suspicious files on your comp if any. For a complete scan or second opinion you can download DrWebCureIt and use that, just like you use stinger.exe. Make sure you have the latest version. If you want a scan of a file on your machine against various AV try jotti or virustotal and upload your suspicious file there. The DrWeb plug in is nice because it is only one click away before you click a hyperlink. I hope it soon will come in for FF 1.5 and Flock. I heard through the grape-vine they are waiting for approval.

Surf safe and malware free is the wish of,

polonus
Title: Re: comodo personal firewall
Post by: Lisandro on December 20, 2005, 03:40:53 PM
Thanks to the new 1.1.004 version, I could get Comodo Personal Firewall working in my computer.
Leaving Kerio, at least, for a while  8)
Title: Re: comodo personal firewall
Post by: szc on December 20, 2005, 04:13:48 PM
Thanks to the new 1.1.004 version, I could get Comodo Personal Firewall working in my computer.
Leaving Kerio, at least, for a while  8)

And as I stated before, Comodo is one nice firewall... it is also really nice to see this:

http://www.softpedia.com/progReportSpyware/14-3-117
Title: Re: comodo personal firewall
Post by: ..::ReVaN::.. on December 20, 2005, 06:03:57 PM
Thanks to the new 1.1.004 version, I could get Comodo Personal Firewall working in my computer.
Leaving Kerio, at least, for a while 8)

Wonderful Tech!  ;) So what is your opinion on it? I use it or rather i am trying it out and i think  it's a great program with alot of potential  :D
Title: Re: comodo personal firewall
Post by: Lisandro on December 20, 2005, 11:23:31 PM
Wonderful Tech!  ;) So what is your opinion on it? I use it or rather i am trying it out and i think  it's a great program with alot of potential  :D
Some things are good, others are weak.

We can't disable the firewall for a while. Just unload the program and need to start it again. Kerio, Outpost and ZA have this option. ZA is even better that allows you to configure some programs to pass through the 'closed' traffic situation.

Need to make a full test of Shields Up  ::)
Title: Re: comodo personal firewall
Post by: szc on December 20, 2005, 11:34:45 PM
I already did it and it can be seen in this same thread at page number 4  ;)

http://forum.avast.com/index.php?topic=17020.45

Firewall maybe be quite new, but I really don't see the reason for  ::) It passed all those tests without a single glitch... even with my router/firewall disabled. It also passed tooleaky.exe

And ZA freeware failed that one... unless you Tech have Pro version, but as it's not freeware I don't believe it's suitable for most users...
Title: Re: comodo personal firewall
Post by: FreewheelinFrank on December 20, 2005, 11:38:14 PM
Comodo needs a more user-friendly mode. Why do I need to know that one part of my computer is trying to talk to another part? What are UDP and TCP? (No, don't answer that!- I'm quite happy with TCP being a brand of gargle/mouthwash in the UK.)

I understand allowing trusted applications to connect out and blocking anything without a very good reason from connecting in. Knowing this, I've been safe with Kerio for over a year, but Comodo leaves me baffled.  ??? ??? ???
Title: Re: comodo personal firewall
Post by: szc on December 20, 2005, 11:46:21 PM
Well you're right there... but why not try to talk to them as well ? I mean, if they care about their customers (regardless is it freeware program or some paid for) they should listen to our advices and change some things. Same situation is with those announcements... they all are exactly the same color, and Kerio has red-ish and green-ish strip, so at least you can get some picture before deciding what to do with that particular pop-up window. It would be really nice if Comodo has something similar.

I guess it's meant to be a firewall for little bit more experienced users... but sure, it would be great if they thought of all those who just started to "play" with these tools.
Title: Re: comodo personal firewall
Post by: polonus on December 20, 2005, 11:48:19 PM
Hi FwF,

You missed the man who hacked TCP/IP for FwF, you know his name: ORAL B. Ha, ha, ha.....

greets,

polonus

TCP EXAMEN ISSUE 70-059 HelpDesk in 20 steps
Title: Re: comodo personal firewall
Post by: neal63 on December 21, 2005, 12:04:16 AM
If I want to effectively disable Comodo I just set my "Security Level" to low which allows ALL incoming/outgoing traffic irregardless of what my original restrictions were.
Title: Re: comodo personal firewall
Post by: polonus on December 21, 2005, 12:18:42 AM
Hi Neal63,

And why should you do that? If you lower your visors, does that not mean you are less protected, or are these settings that high that part of your services don't work? You should make a design of the firewall, and what it is supposed to do before setting it up, yes, my friend, just on paper! Then if you are aware what is going to happen, according to your best wits, you will start to implement, and then you start to fine tune, after analyzing. You you will get it into your grip, step by step.

It is just with a car, rule one read the manual, if you know what is in the manual, start to act.

friend polonus
Title: Re: comodo personal firewall
Post by: neal63 on December 21, 2005, 12:29:59 AM
Hi Polonus,

No, I don't set my Comodo security level to "Low". If I did then there wouldn't be any protection at all. I was just pointing out that I believe if a person wanted to disable Comodo this would be all they needed to do. I leave my Security setting set at "Custom". This way I have complete stealth report results from GRC etc and toolleaky is also passed.  :)
Title: Re: comodo personal firewall
Post by: Lisandro on December 21, 2005, 01:21:42 AM
If I want to effectively disable Comodo I just set my "Security Level" to low which allows ALL incoming/outgoing traffic irregardless of what my original restrictions were.
Thanks Neal... Although, this is not intuitive.
The 'colour' issue said by Sasha is real truth: it needs improvements like this.
GUI and messages layout either  :-\
Title: Re: comodo personal firewall
Post by: RNfromTN on December 21, 2005, 01:24:11 AM
Hi Polonus,

No, I don't set my Comodo security level to "Low". If I did then there wouldn't be any protection at all. I was just pointing out that I believe if a person wanted to disable Comodo this would be all they needed to do. I leave my Security setting set at "Custom". This way I have complete stealth report results from GRC etc and toolleaky is also passed.  :)
 Also if security level is set to 'high',nothing is allowed in or out regardless of your settings or rules.
Title: Re: comodo personal firewall
Post by: Lisandro on December 21, 2005, 02:05:11 AM
Do you know a link where we can find Network (and maybe Program) rules catalog?
I mean, some trustable group or rules that can be manually configurated into Comodo?
Title: Re: comodo personal firewall
Post by: FreewheelinFrank on December 21, 2005, 10:46:13 AM
Quote
Well you're right there... but why not try to talk to them as well ?

Maybe they are reading this! If they're not, they should be. It's an excellent source of feedback from users.

Quote
Same situation is with those announcements... they all are exactly the same color, and Kerio has red-ish and green-ish strip, so at least you can get some picture before deciding what to do with that particular pop-up window. It would be really nice if Comodo has something similar.

True. I understand 'green is good, red is bad.'

http://www.geocities.com/dontsurfinthenude/kerio_setup.htm

Quote
I guess it's meant to be a firewall for little bit more experienced users...

That was certainly my impression. A impressive product, but not for the faint hearted at the moment.