Comodo firewall

JimLL · Dec 10, 2011

XP Pro, SP3, current updates, Comodo firewall, A^2 AV, Lenovo T60p Dual CPU - 2.1 ghz, 15.6" screen, 3 Gb computer memory, 3 cent operator memory

Someone here recommended Comodo firewall. Assuming that someone knows about it I have a question.

I installed it as firewall only - without Defense+. But I'm always getting pop-ups about my software trying to connect out and have NEVER had a pop-up about incoming attempts. And the firewall events summary always says there have been no intrusions blocked.

Why does it look like Comodo is exactly backwards to a firewall - going on about internals and ignoring externals?

hrlow2 · Dec 10, 2011

I use Comodo and I prefer it this way over the earlier Windows firewall that would let any program send whatever it wanted to where ever it wanted.
What you are seeing is the Firewall "learning" what you, as the user, is teaching it about what to allow and trust.

JimLL · Dec 10, 2011

hrlow2 said: ↑

I use Comodo and I prefer it this way over the earlier Windows firewall that would let any program send whatever it wanted to where ever it wanted.
What you are seeing is the Firewall "learning" what you, as the user, is teaching it about what to allow and trust.
Click to expand...

I know what it's doing. What I'm concerned about is what it's NOT doing.

MadMal · Dec 11, 2011

JimLL said: ↑

I installed it as firewall only - without Defense+. But I'm always getting pop-ups about my software trying to connect out and have NEVER had a pop-up about incoming attempts. And the firewall events summary always says there have been no intrusions blocked.

Why does it look like Comodo is exactly backwards to a firewall - going on about internals and ignoring externals?
Click to expand...

I have never had a blocked intrusions either, are your settings the same as mine?

Firewall Behavior Settings
http://help.comodo.com/topic-72-1-284-3022-General-Settings.html

Safe Mode (Default): While filtering network traffic, the firewall automatically creates rules that allow all traffic for the components of applications certified as 'Safe' by Comodo, if the checkbox Create rules for safe applications is selected. For non-certified new applications, you will receive an alert whenever that application attempts to access the network. Should you choose, you can grant that application Internet access by choosing 'Treat this application as a Trusted Application' at the alert. This deploys the predefined firewall policy 'Trusted Application' onto the application.
Click to expand...

Stealth Ports Wizard
http://help.comodo.com/topic-72-1-284-2973-Stealth-Ports-Wizard.html

Block all incoming connections and make my ports stealth for everyone
Selecting this option means your computer's ports are invisible to all networks, irrespective of whether you trust them or not. The average home user (using a single computer that is not part of a home LAN) finds this option the more convenient and secure. You are not alerted when the incoming connection is blocked, but the rule adds an entry in the firewall event log file. Specifically, this option adds the following rule in the 'Global Rules' interface:

Block And Log | IP | In | From Any IP Address | To Any IP Address | Where Protocol is Any
Click to expand...

My computer is "invisible" plus I am behind a wifi router so there are no intrusion attempts.

Just Playin · Dec 11, 2011

JimLL said: ↑

I know what it's doing. What I'm concerned about is what it's NOT doing.
Click to expand...

Do you imagine there are swarms of evil hackers eager to delve deep into the secrets stored on your PC?

One of the main purposes of the firewall is to hide you from those hackers in the first place. They're not intruding because they can't detect your presence on the internet. That is what it is doing.

JimLL · Dec 11, 2011

Just Playin said: ↑

Do you imagine there are swarms of evil hackers eager to delve deep into the secrets stored on your PC?

One of the main purposes of the firewall is to hide you from those hackers in the first place. They're not intruding because they can't detect your presence on the internet. That is what it is doing.
Click to expand...

You are saying Comodo goes on and on about attempts from internal software to get out, but never ever says a single word about sundry attempts to get in from the outside and doesn't even log them.

The last firewall I had started out with scores of attempts from those innocent hackers, until I simply told it not to.

If it reports internal stuff it should report external stuff.

plodr · Dec 11, 2011

If you are beyond a router, the router includes a hardware firewall - that keeps out the intrusions from the outside. So the behavior you see is normal. The software firewall on the computer only has to deal with internal programs wanting to go out.

JimLL · Dec 11, 2011

plodr said: ↑

If you are beyond a router, the router includes a hardware firewall - that keeps out the intrusions from the outside. So the behavior you see is normal. The software firewall on the computer only has to deal with internal programs wanting to go out.
Click to expand...

Interesting. Why didn't the router keep out the intrusions when I was using Zone Alarm?

plodr · Dec 11, 2011

I run ZA (old version before it was sold) and I have no outside intrusions on the computers it is running on. I don't know how the newer versions act so my situation is not exactly like yours.

Log in or Sign up

Comodo firewall

JimLL I can't follow the rules

hrlow2 MajorGeek

JimLL I can't follow the rules

MadMal Corporal

Just Playin MajorGeek

JimLL I can't follow the rules

plodr MajorGeek Super Extraordinaire Moderator Staff Member

JimLL I can't follow the rules

plodr MajorGeek Super Extraordinaire Moderator Staff Member