Comodo firewall

[Sputnik]

I came across this site by accident:
http://www.personalfirewall.trustix.com/
or
http://www.personalfirewall.comodo.com/

Did a quick search on the forum but couldn't find any topic about it. So did people try it, or maybe they like to try it out. Good luck with it.

[Clweb]

Very strange. Comodo website leads to trustix firewall for 9.99$/year and Trustix website leads to comodo free firewall.
After subscribing fore the free one, you get a spam mail (save the forest...)
And 10MB for an unknown firewall is very confusing. I will try it on a test machine. May be it is also a tool for spammers to get email adresses.

[Clweb]

Ok seem to be a real firewall :) , according to documentation.
But impossible to install. Nor on a Win2000, nor on a XP SP2 machine.
At the end of the configuration during install, a message saying 'rolling back could not be performed...., not enough privileges...'
I am administrator and no other firewall installed. On XP, the windows firewall is disabled. ???

[Hipgnosis]

You may want to reconsider using this firewall........

I thought I would download it and try it on a test box. The download went fine, scanned it with ewido and it came back clean, but what bothered me was the conformation email I received from them. Here is the text from that mail:

##############################################
date: 2005-10-21 10:26:09
from: "Comodo Security Services" <personalfirewall@comodo.com>
subject: ORDER #XXXXXX - CONFIRMATION

This message contains a link to a virus and will not be displayed.
##############################################

When a firewall company wants to send me a virus it doesn't instill a lot of trust in that company or its products. And as Clweb said, you also get a spam email along with the conformation.

Yeah, that's a company I want to deal with....NOT!

[se7engreen]

I installed it on a virtual machine and it installed just fine. It installed as a 30 day trial, but prior to downloading I submitted an email address (a garbage mailbox to be safe) and I was sent a key for a year license. So, it's free but it wants you to register.
It started up using around 16mb of memory and settled into about 11-12 on the VM. No component control so it won't be a leaktest killer but gives the typical app control.
Other than a nifty interface, the only thing that might set it apart from other freebies is a set of wizards meant to learn applications and automaticly setup access rules. I haven't tested to see how well it works but it may be nice for those who have regularly updating apps or games and don't want to be disturbed by the fw.

[se7engreen]

{QUOTE-> When a firewall company wants to send me a virus it doesn't instill a lot of trust in that company or its products. And as Clweb said, you also get a spam email along with the conformation. <-QUOTE}

Glad I used a crapbox to get their mail...

Too bad, I know people who would appreciate having an easy app wizard to configure their games for access. I'll attach a screenshot.

I think I'll install the port explorer trial on that VM to see if this fw is behaving itself...

Edit: Out of suspicion, I ran the eula through EULALyzer and it came up with nothing "interesting". Also all is normal with port explorer.

[Hipgnosis]

I thought I would post an update in regards to the Comodo Personal Firewall. My first reaction was to totally write this one off due to an alert I received in an email from the company (shown in this thread). Anyway, I was still intrigued by the firewall because it seemed to offer quite a few very good features so I decided to do some further checking.

I Googled them and it seems that the Comodo Group (the parent company) is a well known (global) internet security related company (I’m not saying that makes them legitimate). Company profile here: http://www.comodogroup.com/corporate/

The most relevant discussion I found in regards to their personal firewall was in an Avast forum. There is a good discussion going on and the firewall is being tested by a number of folks there. Based on this discussion I decided to give this firewall a go on a test box. Thus far I have been impressed. My memory utilization seems to be running a little higher (starts around 13-15mb and goes as high as 20mb) than what some of the folks there are reporting but otherwise an interesting firewall, especially considering it’s free. I have had no problems with stability (BSODs, etc.). The biggest negative I have seen thus far is that is has slowed my boot-up time down noticeably. It has passed the Shields-Up, Sygate SOS and tooleaky tests (that’s all I have tested thus far). Here is a link to the Avast discussion: http://forum.avast.com/index.php?topic=17020.0

Anyway, I just thought I would post this update and information in case anyone else might be interested in testing it out. As was reported here by me and Clweb, you do get a spam email when you register to get the key that turns it from a trial to an annual license. The spam mail is essentially an email from them talking about saving the forests and promoting another of their products, “Trustfax”. I am happy to report that other than that one mail I have received no other “spam”, or any other kind of mail from them. Also, in regards to my previous post here about the reported virus link in their confirmation email; when I registered this time I had the confirmation email sent through Avast and it was reported as clean.

[rdsu]

And about CPU usage?

[Hipgnosis]

{QUOTE-> And about CPU usage? <-QUOTE}

Never tried attaching an image here before...hope this works. If it doesn't, I recorded CPU utilization of 0 to 0.75 and 0 to 1.54.

[rdsu]

can you show me the CPU Time item in ProcessExplorer?

[Oddbod]

Hi,

Im really interested in trying out this firewall but for some reason it wont allow me to install it on the main admin account in XP SP2, i run the setup, it says configuring windows installer, the blue progress bar gets to 100% & it then pops up a error installshield dialog saying failed to create installdriver instance.

It seems to me watching the install in Process Explorer that the MSI installer is trying to install or run IDriver.exe (part of the installshield routines) but is being blocked from doing so.

I have been in touch with support about it & they seem to have gave up, i made sure all my security apps (NOD, Ewido & ProcessGuard) were all disabled but that made no difference at all.

Has anyone here that has install probs with this firewall actually solved how to get it to install?

TIA.

[Hipgnosis]

{QUOTE-> can you show me the CPU Time item in ProcessExplorer? <-QUOTE}

Sure, here you go........

[rdsu]

Thanks :)

[Clweb]

Seems nice. I wonder if someone else had the installation problem I noticed in a previous post. I tried again an installation today and always this problem.

[Hipgnosis]

{QUOTE-> Hi,

Im really interested in trying out this firewall but for some reason it wont allow me to install it on the main admin account in XP SP2, i run the setup, it says configuring windows installer, the blue progress bar gets to 100% & it then pops up a error installshield dialog saying failed to create installdriver instance.

It seems to me watching the install in Process Explorer that the MSI installer is trying to install or run IDriver.exe (part of the installshield routines) but is being blocked from doing so.

I have been in touch with support about it & they seem to have gave up, i made sure all my security apps (NOD, Ewido & ProcessGuard) were all disabled but that made no difference at all.

Has anyone here that has install probs with this firewall actually solved how to get it to install?

TIA. <-QUOTE}

Oddbod,

Don't know if either of these two articles will be of any help but it might worth reading to see if they give any insight into your problem.

http://consumer.installshield.com/kb.asp?id=Q108440

http://consumer.installshield.com/kb.asp?id=Q108322

[Oddbod]

@Hipgnosis, many thanks m8, a link on your first link got me the info & dowloads to clean install the installshield libraries which finally got the setup for comodo to complete & install itself, been testing it at grc & pcflank, so far so good.

@Clweb, the info in this link enabled me to delete & reinstall the different version of the installshield stuff (versions 7, 8 & 9 & the updates for them) meaning the install problem was solved, hopefully the info provided by Hipgnosis will help U too & others with this install problem.

[Oddbod]

Oops forgot the link (mebad)

http://consumer.installshield.com/kb.asp?id=Q108322

I just followed the advice to delete the 7, 8 & 9 versions of installshield then reinstalled them one by one (including updates) After that the setup for comodo worked for me, should do for you too.

[mata7]

{QUOTE-> Glad I used a crapbox to get their mail...

Too bad, I know people who would appreciate having an easy app wizard to configure their games for access. I'll attach a screenshot.

I think I'll install the port explorer trial on that VM to see if this fw is behaving itself...

Edit: Out of suspicion, I ran the eula through EULALyzer and it came up with nothing "interesting". Also all is normal with port explorer. <-QUOTE}

yours have different interface that mine, where you download yours from?

[broken]

That was the older interface.

[mata7]

where can i get the new one, do you have direct link?

[Clweb]

{QUOTE->
@Clweb, the info in this link enabled me to delete & reinstall the different version of the installshield stuff (versions 7, 8 & 9 & the updates for them) meaning the install problem was solved, hopefully the info provided by Hipgnosis will help U too & others with this install problem. <-QUOTE}

Thank you for the info. But the installation process (at least what depends from Installshield) completes. Then Comodo configures itself, and there I get an error message (see below).
The Comodo support forwarded my problem to the developers.
And yes I have administrator rights. I am the only user of the PC.

[Hipgnosis]

{QUOTE-> @Hipgnosis, many thanks m8, a link on your first link got me the info & dowloads to clean install the installshield libraries which finally got the setup for comodo to complete & install itself, been testing it at grc & pcflank, so far so good.

@Clweb, the info in this link enabled me to delete & reinstall the different version of the installshield stuff (versions 7, 8 & 9 & the updates for them) meaning the install problem was solved, hopefully the info provided by Hipgnosis will help U too & others with this install problem. <-QUOTE}


Oddbod,

I'm glad that resolved your problem. :)

[Hipgnosis]

{QUOTE-> where can i get the new one, do you have direct link? <-QUOTE}

mata7,

You can get it here: http://www.personalfirewall.comodo.com/

You will need to provide a name and email address to download and get the activation code.

EDIT: mata7, from the image you posted it appears you already have the latest version.

[mata7]

thanks Hipgnosis

i use that link went i download mine before, but se7engreen have same FWall but Whit a different interface, and the oder guys say that i have the old interface one

[se7engreen]

I just checked out this firewall again and I'm sure that my previous pic was the old interface. Too bad, I found the old interface to look a lot cleaner that this new one.

[mata7]

that explain everything, ya the old interface look more sexy :)

[solarpowered candle]

Interesting that their free privacy toolbar " Trust toolbar v3 that provides you with a trusted, safe and easier way to surf the web" Changes browser settings, for example the default search provider, home or error page(s) etc., without user permission at time of change. Trust Toolbar installs an Internet Explorer URL SearchHook (c:\windows\system32\srhook.dll). When a user types an address into Internet Explorer without including a recognized protocol, IE will utilize the available SearchHook.
Second, silently connects to an unintended location to transmit personal information. URLs entered in IE are transmitted to www.trusttoolbar.com.

So nice of them lol. Does cause one to be a little cautious about loading up their other "free" software

[nicM]

Just an update: there doesn't seem to be any "virus/save the forest ;D " spam anymore, nothing but "real" and serious mail about the order 8)

Cheers,
nicM

[PCJohn]

The firewall looks nice, but its not available for Windows 98.
I wish that Comodo would make one for w98 users too.

[khazars]

Why are they asking for my mac address?

[Mirin]

Ver. 2.0 is out

[PCJohn]

So is it spyware or not ?

[passerby]

Has anybody tried the new version? Does it eat up lots of RAM? Heavy or light?

[mata7]

comodo launchpad can be remove?

[Mirin]

http://www.personalfirewall.comodo.com/download/setup.exe
http://www.personalfirewall.comodo.com/whats_new.html
You can use activation code you got before.
There is no option not to install launchpad but it seems to be ok to remove it from startup.

[QBgreen]

I'm gathering from the "What's New" for version 2 that Comodo is being very serious about joining the extremely small group of quality firewalls. I'm starting to become impressed enough to give this thing a workout. Have a look: http://www.personalfirewall.trustix.com/whats_new.html?currency=USD&region=North%20America&country=US

[kalpik]

Hmm.. Thats interesting.. Anyone tried it? Whats it like?

[MaB69]

I've tried it for 2 hours : a very good firewall (nice GUI for me) but very hard on memory (nearly 50 Mo for 3 threads ) :-[
A winner for leaktest blocking, even the newest (jumper and breakout)
very nice for a free firewal
Back to jetico :P

[Kerodo]

Tried it last night very briefly. It looked interesting at first until I noticed some of the rules it was making for apps. It made a rule for my time sync service that showed inbound approval only, no outbound, yet it was asking for outbound permission, so why no outbound rule? Yet for other apps like Firefox or whatnot, it showed the proper outbound and inbound rules. So something is weird there. It seems kinda nice, yet fairly simple, but I suspect more work needs to be done on it yet.

[Kentish]

I installed this to try after removing Netveda (I prefer an application based firewall over rule based), and so far it seems ok, a little more intrusive and active but that can't be too bad.

Main thing that concerned me was Zerospyware LE flagging the Comodo taskbar as trojan/browser hijack. After removing the taskbar, Comodo wouldn't run properly, so the taskbar was reinstalled.

Haven't yet made up my mind fully yet.

[linesman]

I have been using comodo free firewall for about a month
it installed a trust toolbar as already mentioned ,and I found a comodo toolbar reference in the registry.

Updated today to version 2 ,all seemed well at first ,but...

Kept getting the dreaded Internet explorer has encountered an error and must close message when trying to view various computer forums , on line shopping sites and many others.

Every error said a problem with ddrawex.dll

Got a copy from the web but couldn't rreplace it in windows because windows is using it.

System restore saved the day! Went back to last night's restore point.

Been happily surfing all night now

It was the only thing that had changed since last night

I use xp pro with amd processor

[Nilhar]

I 'm testing Comodo 2.0 and is very good.
The first firewall that pass all leaktest of gkweb 's web! :o

Only fail with the test of zone alarm pass and osfwbypass-demo.exe...

And some weak with memory resources ...

But I like me... GREAT Firewall a easy configuration!:D

[linesman]

update to my problem

sent them an email saying about the error ,had a reply asking what version of IE I am using , any toolbars like google being used . I use IE 6 and the google 4 toolbar.

Re downloaded version 2 ,uninstalled version1 , reinstalled version 2.

Also went into the security/advanced settings of the program and they asked me to uncheck "enable application behaviour analysis " check box ..


Then restarted the computer as asked.

no internet explorer closing down, can surf the net happily.

Hope it stays ok ,it seems quite easy to use

[metallicakid15]

comodo does second best behind jetico in freeware firewalls in leaktests

[Nilhar]

Comodo not is freeware. Is licensed lifetime of 365 days ( one year ).::)
But this is very good firewall...

[FatalChaos]

{QUOTE-> comodo does second best behind jetico in freeware firewalls in leaktests <-QUOTE}

The version that they tested is version 1. Version 2 i heard has passed all tests.

[chaos16]

Is this firewall very good?

it looks good?


does anyone know if its better than KIS 6.0 firewall?http://www.comodogroup.com/products/personalfirewall.html

http://www.personalfirewall.comodo.com/whats_new.html?currency=EUR&region=Europe&country=GI

[monsunami]

Testing this firewall (version 2). Pretty impressive. Past about all online stealth test and I heard it is passing leak tests. It takes up about 20000K of memory on my machine. Also the popups are very informative.

[chaos16]

anyone thinks this firewall is better than the firewall in KIS 6.0

[DarkX]

Comodo Firewall v2 is very impressive, passed all leak tests in virtual my machine but i still dont understand why do i have to install trust toolbar to use it?

[chaos16]

so for protection this firewall is maybe the best right?

but its a bitt higher on cpu right?

so in protection this firewall is better than KIS 6.0 firewall right?


also this firewall seems like it has more features than the KIS 6.0 firewall?

[crookit]

Been trying for a few days, no problems experienced so far, boot time seems to take a wee bit longer and a bit high on cpu.

Difficult to understand how such a good product is free, what's the catch?

[Stem]

{QUOTE-> Difficult to understand how such a good product is free, what's the catch? <-QUOTE}I dont know if there is a "catch" with the firewall, I have not run this yet (not sure if I should give this company my IP/E-mail address).
I know there was a problem with thier "Trust Toolbar" (classed as "Browser Hijacker") http://www3.ca.com/securityadvisor/pest/pest.aspx?id=453074930

[beetlejuice69]

I just started to use this and so far it`s working great. I didn`t have a Trust Toolbar to install on the Ver:2 of this app.

[Stem]

I found a 30 day trial of this firewall (no registration needed), and installed. At first glance it appears to be O.K. Nothing suspicious installed (no browser addons etc). The updater wanted an outbound connection, but the firewall itself alerted me to this, and blocked this comm when I selected to. (So at this early stage it appears that there are no hard coded rules, well at least for the updater).
Is anyone checking the connections made by this firewall (packet capture/analyzer?). If not, I will do this over the weekend (just to check).

[beetlejuice69]

{QUOTE-> Is anyone checking the connections made by this firewall (packet capture/analyzer?). If not, I will do this over the weekend (just to check). <-QUOTE}

I haven`t done any tests other than the normal leak tests and stuff. It would be good to see what your results are once you do the test.

[khazars]

I've just downlaoded this firewall and it is very impressive, passed all the leaktests I tried although I couldn't run some of them as anti vir has corrupted them!

My main reservation is its fingerprint, the four files are cpf.exe running at 30-34MB, CLPTray 4MB and CLPgui 13MB and cmdagent 4MB.

I'm going back to Jetico!

[Stem]

{QUOTE-> It would be good to see what your results are once you do the test. <-QUOTE}Well,...it appears to be O.K. No connection attempts that I was not aware of.
(it does on installation connect to 12.158.80.10 ... "crl.verisign.com/class3softwarepublishers.crl",.... just a mention)

[beetlejuice69]

Great Stem thanks for the update. Nope (it does on installation connect to 12.158.80.10 ...) that`s OK with me. Thanks again.

[zapjb]

Very interesting discussion so far. Thanks folks. I'll keep an eye on this topic.

[rdsu]

I still didn't try it, but seems to use a lot of resources...

[drkoopz]

It's impressive as a firewall, but for the resources it uses, it's not worth it for me. The whole 'application' protection built in is great, and the shiny GUI is just fine as well. But when it all boils down, it's just a firewall and when that FIREWALL saps up 60 to 70 megs of my awesome memory, I have to give it the boot. Back to Kerio for me. (yes i'm aware Kerio isn't easy on resources either, but uses HALF of what Comodo does)

And i'm beginning to realize that leaktests mean nothing. If you want to pass the leaktest, download a free hips like PrevX or Process Guard or Antihook etc. Not a firewall that has all the gizmos and gadgets, yet a ton of weight.

I would speak for Jetico, but when I used it, it crashed my PC and I had to reformat. I did however enjoy Kerio 2.* series and Netveda, and also Filseclab Professional.

[Kerodo]

I tried Comodo 2.0 briefly just for fun and found a few bugs/problems in it's rule creation. I reported the problem to the Comodo people in comp.security.firewalls NG where they seem to hang out and monitor user feedback. They are working on fixing it. So to me it seemed a little rough yet and needs a little more work. But it might turn out to be good at some point. If the ram usage is really that high (I didn't check myself) then I'd have to say that's no good either though.

[scoopnoggin]

On my system, cpf.exe is running at 20 megs of ram, ClpTray is 4 megs and cmdagent is 4 megs. If I open the GUI, that adds 13 megs, but then how often is that? So 29 megs is how much it uses in the background here.

[Nilhar]

{QUOTE->
And i'm beginning to realize that leaktests mean nothing. If you want to pass the leaktest, download a free hips like PrevX or Process Guard or Antihook etc. Not a firewall that has all the gizmos and gadgets, yet a ton of weight.
<-QUOTE}
You are wrong... This prograns not are suficient in my opinion.
Example of a fail with use of process guard:
A have a legality program validated with process guard that connect with internet without my permision... Process guard can´t alert me...

This is the reason a good firewall for this, like a comodo... ;D

[drkoopz]

Alright! Process Guard probably generated some 'fails' but that's only if you allow the processes :P.

And usually Antiviruses also help me pass the leaktest as well. I think most of the time I was testing my firewall I had to shut off my AV because it kept harassing me to remove the test program. That way if a firewall failed a certain test, I hardly ever gave two hoots. The best program to prevent viruses and malware is YOURSELF, and a good collection of software. Not the great firewall of China. God knows, even THAT never worked ;D

[monsunami]

True. Yourself is the best defence. However more security products these days are gearing towards noobs in ways of computer security. Having different layers of products of course is a way to help alleviate bad judgement and dependancy on one software incase it fails. I really doubt many peeps in here will just depend on one firewall for all their needs. However, having one great firewall of China won't hurt if it is just one layer of your security. However, I do recommend a high end computer for this comodo until they fix the resource problem in their next releases.

[drkoopz]

{QUOTE-> However, I do recommend a high end computer for this comodo until they fix the resource problem in their next releases. <-QUOTE}

Which is generally the point i'm trying to make, heh. If Comodo were low on the memory scale, I probably wouldn't have such a big deal with it. I think the Firewall's bundled features are something you'd see on paid software, and it's got a shiny GUI. But you just gotta face the facts that what helps Comodo PASS these leaktests are the fact its got an application HIPS built in, and just like any other HIPs, it doesn't have a brain. It's a matter of choice on your part. Sure it tells you that an application is trying to run stealthy in the background, and it 'may' be a virus or harmful application...but generally it was either my antivirus updater or spyware updater running, and if someone is n00bish enough to disable that, they are even MORE in a security predicament.

So in conclusion, what makes Comodo worth having over a Kerio 2.* and Processguard/Antihook (depends on preferences) combination? You take up less resources, and you're getting similar protection (and with antihook, maybe you're getting more). There's nothing special enough about Comodo to pick up in my opinion, they have a track record of spyware through their Trust Toolbar, they have features you can get anywhere's else with lower memory, and less bugs. And while I agree more apps are crucial to protecting your PC, you can only have so many before they annoy the crap out of you with a vast array of questions...and finally you'll sit down and go "I am sick and tired of answering 'yes, remember my answer' to every popup from all the hips,nips,bips,tips programs you have and just format, install Firefox and a couple security apps and call it good. :D

So what CAN you say about Comodo? I wish they'd get rid of the launcher in the task tray and go straight to the Firewall interface instead (unless there's an option to turn that off). I wish they'd throw in a tiny traffic meter to show what's going in and out in your tray icon, and finally i'd wish they'd get rid of that bug after uninstallation that still tells you it's running under Windows SP2's Security Center(which is dangerous). But those are minor quibbles, except for the latter.

[AJohn]

Comodo has no HIPS features. It only monitors certain things and notifies you when they lead to Program A wanting internet access (whatever the means). What is great about Comodo, is that if you choose to block this, it will only block the network connection. It does a great job at leaving the HIPS work to the HIPS ;D

[AJohn]

Also, the features Comodo provide are important for anyone wishing to monitor their applications Internet access (in every aspect possible).

HIPS in general can provide the same protection, given they monitor the features used (such as certain API calls) to gain network access. Unless the HIPS provides extensive details containing the information being sent and the user knows how to read the information than this is no good. This means that the user must know or look up every possibility they are unsure of, such as important files, registry keys, API calls, ect.

I personally think of programs such as Comodo as a great way to make this much easier on me, just a preference though. If the users knowledge permits, time allows then leaving the application network access to the HIPS is a possible way of saving on some resources.

[drkoopz]

{QUOTE-> Comodo has no HIPS features. It only monitors certain things and notifies you when they lead to Program A wanting internet access (whatever the means). What is great about Comodo, is that if you choose to block this, it will only block the network connection. It does a great job at leaving the HIPS work to the HIPS ;D <-QUOTE}

Oh, the whole 'component' control is basically what gives me a headache. To the point where Comodo allows a learning mode for it. My personal definition of HIPs is any program that asks too many questions ;D , and THAT Comodo Firewall does extensively. So i'm not going to go on a research quest to figure it out, but I do firmly believe that if you install Prevx1, or Antihook, you are more likely to recieve similar protection without the extra weight of Comodo. I do enjoy the fast development cycle of Comodo, and i'm impressed what they're doing...but i'm not going to sacrifice my precious resources to a leaktest passer when Jetico, or Outpost Free w/Antihook can do it for me. Besides, Comodo wont get the hell out of my Security Center and that's just not acceptable, my PC is sexy and it needs not such a flaw tainting it's beauty. :P

So :thumb: to Comodo when they shed some weight. Maybe they'll pull an Avast 4.7 on us when we least expect it. :D

[scoopnoggin]

{QUOTE-> Comodo wont get the hell out of my Security Center and that's just not acceptable, my PC is sexy and it needs not such a flaw tainting it's beauty. :P

<-QUOTE}

I feel your pain. I ended up doing a system restore to the time I installed Comodo to get rid of it.

[shaunwang]

hmm, by seeing the size of the installer I can sense it will be bunky and heavy, compare it to LNS though its only a few kb but Comodo is about 16.5mb in size way too heavy

[monsunami]

yah, I understand the resource problem. However, due to the speed of the development, I wouldn't be surprised to see resource usage improve on next release. As for the Security Center problem, I would email that to their support to let them know. Personally I don't use Security Center. You can also disable component control so it will behave more like most other firewalls out there.

[AJohn]

The next release (according to Comodo, at the end of this month) will fix the security center problem. Will be interesting to see which way they go with this...

[shaunwang]

well at least comodo should be aware of their resources, coz there's still people out there who needs a good firewall and a reliable one which does not hog around with resource too much. I do not expect them to development that fast if their resource on the new development is going to be heavy. Lets hope by the end of this month they able to cut down on this and fix the flaw which were mention.

[JimmyD]

{QUOTE-> My main reservation is its fingerprint, the four files are cpf.exe running at 30-34MB, CLPTray 4MB and CLPgui 13MB and cmdagent 4MB.
<-QUOTE}

Here's mine:

cpf.exe - 16.5 MB
CLPTray.exe - 2.2 MB
cmdagent - 2.8 MB
Total - 21.5 MB

I don't see any reason to leave the GUI open so that's irrelevant.

[Kentish]

Already had 1 update, which has made a big improvement on the resources. Another update due soon apparently.

[korb]

hi, every time after booting up for 5 mins ,comodo was force to shut down by window error notify. reason cause by this component:rrshell.dll
anyone have any suggestion.???

[BoToMaTiC]

Just a Great Firewall,

I used alot of em but this one takes em all.

Now that Version 2.0.0.1 came out yesterday, it runs smoother then before so this is my main Software Firewall from now on.

[RejZoR]

Good firewall, though it appears to have extreme problems with eMule (LowID).

[waters]

Low id also.Any ideas

[waters]

Ok found what to do on there forum

[monsunami]

okay, firewall updated itself and now is much more responsive when clicking allow or deny an operation. Hope they keep improving.

[djg05]

I was interested in getting some background for this f/w. Came across this thread

http://groups.google.co.uk/group/alt.comp.freeware/browse_thread/thread/bdaaf13314478629/6288a16994c52439?lnk=st&q=webtrust+comodo&rnum=2&hl=en#6288a16994c52439

Apologies if it has been up before.

[Melih-Comodo]

Can you pls share with Comodo developers the problems with eMule so that they can fix it.

we would love to continually improve our product and user feedback is a key component. Hence I would appreciate your feedback on this issue pls.
you can either send an email to support@comodo.com or preferebly come to forums.comodo.com and talk to our developers there.

thanks
Melih
Comodo

{QUOTE-> Good firewall, though it appears to have extreme problems with eMule (LowID). <-QUOTE}

[RejZoR]

Certanly. Actually it's a pretty simple one. Emule has LowID even though i set everything related to emule.exe to ALLOW (including all addresses and all ports).
So i assume it has something to do with IDS part (the proactive one).

Also i don't like that centralized control and tray icons aren't the best either.
Otherwise it's pretty nice firewall.

EDIT:
Yey, now i can't even install it.

Error: 1608
Unable to create InstallDriver instance

You really have to recheck both AV and FW installers. They seem to have terrible problems all the time for everything. First i couldn't uninstall Comodo AV, now i can't even install Comodo FW, god knows what else will happen next time...

[Melih-Comodo]

Thanks for the feedback. Much appreciate it.
We hope to have a much more stable installation for the products with the next release.

Again, thanks for bringing this to our attention.

Melih

{QUOTE-> Certanly. Actually it's a pretty simple one. Emule has LowID even though i set everything related to emule.exe to ALLOW (including all addresses and all ports).
So i assume it has something to do with IDS part (the proactive one).

Also i don't like that centralized control and tray icons aren't the best either.
Otherwise it's pretty nice firewall.

EDIT:
Yey, now i can't even install it.

Error: 1608
Unable to create InstallDriver instance

You really have to recheck both AV and FW installers. They seem to have terrible problems all the time for everything. First i couldn't uninstall Comodo AV, now i can't even install Comodo FW, god knows what else will happen next time... <-QUOTE}

[RejZoR]

Another thing i don't understand is why Comodo creates separate rules for In and Out traffic, when you can select "Both directions" option?
It just creates longer Applications list which is harder to read.
Same for IP and port range. From 0 - 255.255.255.255 and 0 - 65535. Why not just set "Any" ?

EDIT:
I also found out whats wrong with eMule+Comodo FW combination.
It's the way how firewall applies rules.

You have to use Network Monitor rules to block ICMP Echo and TCP (to pass GRC test), but eMule fails to work properly even though it's set to allow connections in all possible directions, including invisible ones.

But if i remove TCP blocking rule in Network Monitor eMule starts working, but GRC test fails on unsolicated TCP stuff.

So in my opinion Network Monitor rules should be important, but appliactions should also have option not to obey them (if you set them to allow ANY). It must be possible because other firewalls also manage to stealth the PC, yet eMule can still work as usual.

[Melih-Comodo]

{QUOTE-> Another thing i don't understand is why Comodo creates separate rules for In and Out traffic, when you can select "Both directions" option?
It just creates longer Applications list which is harder to read.
Same for IP and port range. From 0 - 255.255.255.255 and 0 - 65535. Why not just set "Any" ?

EDIT:
I also found out whats wrong with eMule+Comodo FW combination.
It's the way how firewall applies rules.

You have to use Network Monitor rules to block ICMP Echo and TCP (to pass GRC test), but eMule fails to work properly even though it's set to allow connections in all possible directions, including invisible ones.

But if i remove TCP blocking rule in Network Monitor eMule starts working, but GRC test fails on unsolicated TCP stuff.

So in my opinion Network Monitor rules should be important, but appliactions should also have option not to obey them (if you set them to allow ANY). It must be possible because other firewalls also manage to stealth the PC, yet eMule can still work as usual. <-QUOTE}

these discussions might be useful

http://forums.comodo.com/index.php/topic,29.0.html .

http://forums.comodo.com/index.php/topic,25.msg111.html#msg111


pls do not hesitate to ask further clarification if you need any.

thanks
Melih

[korb]

i found that comodo don't work well with regrun 4.5. regrun 's rrshell.dll always shut down comodo after 10-15 mins. anyone experience this before.now i'm back to jetico. :(

[Melih-Comodo]

{QUOTE-> i found that comodo don't work well with regrun 4.5. regrun 's rrshell.dll always shut down comodo after 10-15 mins. anyone experience this before.now i'm back to jetico. :( <-QUOTE}


Korb

Can you pls provide me with details of your configuration etc (os, running apps etc) so that we can re-create the environment to replicate this and then fix it!

thanks for your help

Melih

[korb]

{QUOTE-> Korb

Can you pls provide me with details of your configuration etc (os, running apps etc) so that we can re-create the environment to replicate this and then fix it!

thanks for your help

Melih <-QUOTE}

hi melih,

well i will try my best as i had already uninstall comodo for the moment.

configuration for comodo is default and i also try turning-on component from learing mode.i even add the "rrshell.dll to let comodo reconize it.but all seem not to work.

OS: XP pro sp2
running app: chx-I filter packet (no conflict)
GSS (ghost security suite) (no conflict)
NOD32 (no conflict)
unhackme (no conflict)
regrun 4.5 ( conflict )

when i start window with runguard(part of regrun ) after 5-10 mins, a window error message will appear to say that comodo need to shut down .the component that shut it down is "rrshell.dll".



i quote from greatis web site "What is the "rrshell.dll"?

This DLL is used to trap file execution.

You can see it in the regrun Start Control, "Windows Core Components", "Shell Loggers" tab. This DLL is required to use RunGuard in auto mode.

If you are being asked by WatchDog(part of regrun) about "rrshell.dll" you should decide do you want to use RunGuard in auto mode or not." unquote.

i quote again "RunGuard is a tool allows you to automatically check a file before its execution. If the file will be suspicious, RunGuard will warn a user to proceed execution or decline it.

RunGuard uses own "ScriptCheck" technology to determine if a file is useful or harmless.

RunGuard can check:

ท Microsoft Office files (doc, dot, xls, xlt, ppt);

ท HTML files (htm, html, shtml, asp, mhtml);

ท Windows script and batch files (vbs, wsh, js, bat pif, cmd);

ท Windows HTA (hta);

ท Windows registry files (reg.)"

[Melih-Comodo]

thanks Korb
we are on with it..

thanks
Melih

[Ciaba]

...Hi all this's my first post and I've a question on Comodo with Opera Browser, exactly with post service of Opera(integrated in). Every time I start Opera Comodo Showing me a windows with 4 events all similar with only number of doors different(too much different every time...Es 4567\8\9\0, or 1234\5\6\7, etc, etc).

http://img264.imageshack.us/img264/1945/comodoopera5bq.th.jpg (http://img264.imageshack.us/my.php?image=comodoopera5bq.jpg)

If I select remember my answer Comodo dont do it and if I close\open Opera he reshow same event...any Idea??

p.s. Melih, sorry, why U've decided to not put in Applications Monitor's rules the control on local(source), ports and IP??

p.p.s when I resize in windows the space between events columns(i think needed for a good ergonomic work on rules), this is not recalled and if move on a different windows and then come back the space is in default mode. I know is a little thing but for me is important for to see rule's dettail.

...cya...and sorry for english,...but is so ;D

[EDIT]
I've solved with a 100% free access rule for Opera...but not like me much.
Why is not possible use only a rule with selected ports(21,25,53,80,110,443), for Browser??

[olap]

@Ciaba testa di caz.. ai cambiato firewall, non e migliore di Jetico, dispiace.
Prova configurare send datagram.

[Ciaba]

{QUOTE-> @Ciaba testa di caz.. ai cambiato firewall, non e migliore di Jetico, dispiace.
Prova configurare send datagram. <-QUOTE}

Ah che accogliente benvenuto,...vedo con finto stupore che gli imbecilli sono distribuiti in ogni parte del globo :isay:
Si ok nn è ai livelli di Jetico ma è un buon firewall in ogni caso. ;)

Ho risolto dando via libera a tutto, porte e protocolli ma nn è che mi sfagioli molto la cosa...mah vedremo.

p.s. cmq l'ho messo su solo per testarlo...penso che a breve tornerò a quello serio.

[timcan]

Hi Ciaba, why not post this question at comodo forums? They have cpf development people that frequent help there. Hope this helps.http://forums.comodo.com

[Melih-Comodo]

{QUOTE-> ...Hi all this's my first post and I've a question on Comodo with Opera Browser, exactly with post service of Opera(integrated in). Every time I start Opera Comodo Showing me a windows with 4 events all similar with only number of doors different(too much different every time...Es 4567\8\9\0, or 1234\5\6\7, etc, etc).

http://img264.imageshack.us/img264/1945/comodoopera5bq.th.jpg (http://img264.imageshack.us/my.php?image=comodoopera5bq.jpg)

If I select remember my answer Comodo dont do it and if I close\open Opera he reshow same event...any Idea??

p.s. Melih, sorry, why U've decided to not put in Applications Monitor's rules the control on local(source), ports and IP??

p.p.s when I resize in windows the space between events columns(i think needed for a good ergonomic work on rules), this is not recalled and if move on a different windows and then come back the space is in default mode. I know is a little thing but for me is important for to see rule's dettail.

...cya...and sorry for english,...but is so ;D

[EDIT]
I've solved with a 100% free access rule for Opera...but not like me much.
Why is not possible use only a rule with selected ports(21,25,53,80,110,443), for Browser?? <-QUOTE}


Ciaba
come and put your requests for features in the wishlist in the Comodo forums so that our developers can track it.
thanks
Melih

[timcan]

{QUOTE-> ..



[EDIT]
I've solved with a 100% free access rule for Opera...but not like me much.
Why is not possible use only a rule with selected ports(21,25,53,80,110,443), for Browser?? <-QUOTE}


Hi Ciaba,you can do this, pls go to appl. monitor >right click opera.exe>edit>remote port>set of ports>ok .

[Ciaba]

k guys, I'll do it shortly

[Ciaba]

{QUOTE-> Hi Ciaba,you can do this, pls go to appl. monitor >right click opera.exe>edit>remote port>set of ports>ok . <-QUOTE}

Tnx but nothing, same problem...

http://img245.imageshack.us/img245/6088/comodo2opera0zd.th.jpg (http://img245.imageshack.us/my.php?image=comodo2opera0zd.jpg)

I think need to do a rule for Network monitor.

But not all bad, I've found finally a good setting for eMule...so in time step by step :D

[The Hammer]

Here's a glowing review of 2.0. http://www.pcmag.com/article2/0,1895,1969225,00.asp

[trojan]

Must say this firewall is good, runs well on my system reminds me of a cross between zonealarm and tiny but with less features.
I have had no negative issues thus far, the product/company seems to have caused concern with its toolbar that many antispyware programes are flaging as a hijacker. I am running it now alongside outpost 3.51 kav 6.0 and Prevx with no compatability issues and no stability problems as i still like some of the features that Outpost has and would miss them. Outpost does not detect the comodo install so their is no annoying nag screens about running 2 firewalls lol
I did obviously test when only comodo was installed and it passed sygate grc and some tests with trojans using dll and thread injection, Comodo was able to detect and stop the reverse conection of bifrost and a few others i tested.
Not sure weather it can really compete with the best firewalls available (lacks some features) but being free and so easy to use it must make the no1 free firewall recomondation in my view as jetico is just not for everyone for obvious reasons and free zonealarm and avg are useless. The free pcguard that ntl giveaway also deletes some of the componets of Comodo calling them spyware this is also a false posative this company seems to get alot of bad press and from what i can see none of it is justified 8)

Is their antivirus any good? their forum seems to be full of complaints kinda put me off of it

[Rieske]

Thing doesn't do well with Emule (low ID and that sorta stuff), even when the rules are applied as given on the support forum.

[Ciaba]

{QUOTE-> Thing doesn't do well with Emule (low ID and that sorta stuff), even when the rules are applied as given on the support forum. <-QUOTE}

Hi Rieske, not true, eMule work well with Comodo...but U must set well it's rules, expecially in Network Monitor window, respecting correct Up\Down order.
Would U report setting U R use for eMule??

[Rieske]

Used the settings as given.

[waters]

Emule high id .I followed the advice on their forum,and posted here.Works well with emule

[Rieske]

Strange, rules dumped and set again. Now it works fine. TY.

[RejZoR]

Hm, looks like Comodo guys fixed some issues. Or just a random display, though i hope it's not...

Packet filtering is perfect now, i just removed all Network Filters and added block all inbound ICM Echo requests. GRC test seems to pass just fine with TruStealth status. eMule running with HighID too, though it took a bit longer to max out the upload.

Melih, was there some update that fixed this? I've re-downloaded entire installer today, so i don't know if there were any updates...

[QBgreen]

{QUOTE-> Hm, looks like Comodo guys fixed some issues. Or just a random display, though i hope it's not...

Packet filtering is perfect now, i just removed all Network Filters and added block all inbound ICM Echo requests. GRC test seems to pass just fine with TruStealth status. eMule running with HighID too, though it took a bit longer to max out the upload.

Melih, was there some update that fixed this? I've re-downloaded entire installer today, so i don't know if there were any updates... <-QUOTE}

CPF was updated to v. 2.1.0.1. After opening up the executable, the installation file is dated 6/1/06. Got the file from SoftPedia, no release notes available there or on the CPF home page.

[AnthonyG]

I have been using this for about 24 hours now. I gave it a what the hey test while i was waiting for OA's firewall.

But I have to say, other than a few small problems I am absolutely loving this Firewall. And honestly am feeling I now do not wish to remove it. I would infact go as far to say it is definitely up there as a contender for the best firewall i have tried (and i have tried them all).

I still cant believe it is free. I am expecting something to honestly jump out at me as something this good cant possibly be free.

But it does have some faults thought on the version i am using 2.1.1.1. Such as its problems with Kaspersky AV v5, which i have reported on Comodo's forums. And i will be reporting it on Kaspersky's forum too.

And its ommiting problems causing slight system freezing sometimes.

But once these problems are sorted this is definitely a keeper.

I just hope it runs well alongside OA in its future v2 release when it comes out (i.e when OA comes with its own firewall) as OA is another one of my indispensible programs that i cant live without.

Thanks
Anthony

[RadicalEdward]

{QUOTE-> Outpost does not detect the comodo install so their is no annoying nag screens about running 2 firewalls lol
<-QUOTE}

How is that possible? The only other firewall I've been able to run along side a 3rd party app is the crappy windows firewall.....any other time I've tested two at once my computer gets blown up....

[beetlejuice69]

Did anyone notice that the newest ver of Comodo is still forgetting rules?

[RadicalEdward]

Yup, I decided to scrap sunbelt off my machine because it ocasionally caused crashes, so I downloaded comodo. While I've granted access to all of my av updaters, I still get pop ups asking me to grant them access.

[beetlejuice69]

{QUOTE-> Yup, I decided to scrap sunbelt off my machine because it ocasionally caused crashes, so I downloaded comodo. While I've granted access to all of my av updaters, I still get pop ups asking me to grant them access. <-QUOTE}

Oh OK thanks. I thought they were going to fix that in this build. Must be the next build they were talking about. Thanks again.

[aigle]

I have the same issue. I think after each AV update it happens.
So its, a known issue?

[RadicalEdward]

They fixed it in the new version....however the process cmd agent is constantly sucking up at least 20% of my CPU even when it's not in use....a bit annoying even though my computer can handle it...

[Melih-Comodo]

{QUOTE-> They fixed it in the new version....however the process cmd agent is constantly sucking up at least 20% of my CPU even when it's not in use....a bit annoying even though my computer can handle it... <-QUOTE}


it should not do that.
We have seen this with a program called Weather Channel (or something similar) that tells you about weather.

There must be a program in your PC thats causing this, its matter of figuring out which one. Also when you do, can you pls let us know at Comodo so that we can identify the issue.

thanks
Melih

[Stem]

Hi Melih-Comodo,
I see your firewall is coming on in "leaps and bounds" ("very quickly")
How are the "application rules" progressing, is it possible to block an IP with these rules, and can they be ordered yet (placed into an order of rule preference/priority)

Regards,

[RadicalEdward]

@Melih

I know, I registered as a different user name in your support forums and posted that discovery. It's not something I absolutely need to run, so I don't mind shutting it down.....

[Melih-Comodo]

{QUOTE-> @Melih

I know, I registered as a different user name in your support forums and posted that discovery. It's not something I absolutely need to run, so I don't mind shutting it down..... <-QUOTE}


Ok thanks :-)

We will fix it though :-)

Melih

[neonSurge]

{QUOTE-> Hi Melih-Comodo,
I see your firewall is coming on in "leaps and bounds" ("very quickly")
How are the "application rules" progressing, is it possible to block an IP with these rules, and can they be ordered yet (placed into an order of rule preference/priority)

Regards, <-QUOTE}

Hi Stem,

Yes I think that issue has been fixed too. So it seems it was a bug. Also they are completely redesigning that part : http://forums.comodo.com/index.php/topic,541.msg3224.html#msg3224

J

[nice_guy]

I would like confirmation that a problem I am having with CPF 2 and above is not limited to just me.

The problem is that the Temporary Internet Files folder (AKA TIF) is NOT being cleared automatically when the IE browser is closed if you have enabled this option. I believe the problem is caused by CPF.EXE having a lock or similar on the folder. Only if I kill the process CPF.EXE does the cache get cleared.

However, manually clearing the cache works. The one built into Internet Options and all 3rd party programs I tried work. It's just the automatic clearing as I am outlining below:

Here's what you need to do if you don't already do this:

1. Open up your IE browser. Select Tools|Internet Options|Advanced Tab.

2. Go to the Security heading near the bottom of the list and check the box called "Empty Temporary Internet Files folder when browser is closed".

3. Close your browser.

4. Open IE browser again and browse a few sites to get some stuff into the cache. Without closing your browser you can use Tools|Internet Options|General|Settings|View Files while in the browser to view the cache to see if it does indeed have 'stuff' in it. You should see lots of stuff in the cache (jpgs, gifs, css, html, etc.).

5. Close your browser.

6. Now look at your TIF folder to see if it has been cleared. I suggest you use the Control Panel applet called Internet Options to do this without having to open the browser. The only thing you should see are Cookies and maybe a few other things. You should NOT see things like jpegs, gifs, CSS files, html, jscripts, etc.

Let me know if I am the only one having this problem with CPF running?

Thanks.

[nixie21]

Just downloaded this last night.... Looks good so far...

Any advice for a novice user???

It seems high on resources, is there any way to lower it?
What are the settings for emule?

Thanks!!!

[Technic]

Hi!

The resource usage is pretty high indeed. I left my laptop on last night and now usage is 27 megs and 20 megs VM. I am running utorrent at background, active connections about 30. Any ideas?

Otherwise this firewall seems pretty good. Thanks for the authors. :)

Tech

[Sputnik]

@Technic
They are aware of the recource usage and promised to lower this in the upcoming versions.

[Technic]

{QUOTE-> @Technic
They are aware of the recource usage and promised to lower this in the upcoming versions. <-QUOTE}

Thanks for the info Sputnik. :D

[Durad]

Can this firewall be set to block all inbound and allow all outbound traffic?

(without pop-up windows, for newbies)

[the Tester]

"Can this firewall be set to block all inbound and allow all outbound traffic?"

Sort of....It has the Block All and Allow All options.But I think that's both inbound and outbound.

[Stem]

Hi Durad,
{QUOTE-> Can this firewall be set to block all inbound and allow all outbound traffic?

(without pop-up windows, for newbies) <-QUOTE}From the default "auto" config "minimal popups" installation of Comodo, the firewall will allow "All known good" applications direct access to the "network rules" which are by default, Allow outbound : Block inbound, So there will be no popups at all for known good applications.

____
Stem

[Durad]

OK installed it but it look like that firewall does not save created rules. For example I allowed Antivirus and antispyware to update but after next restart it asked me again... yes i did place checkmark.

[Stem]

Hi Durad,
Which version have you installed? The later versions now have the option for the "auto_accept_application" and no application rules are required. These default to the "Network rules" which allow all outbound : block all inbound (connections)

____
Stem

[Durad]

Version 2.2.0.11

[Stem]

{QUOTE-> Version 2.2.0.11 <-QUOTE}Download the latest Beta, I think you will like this version for the lack of popups (It is still a little hungry for memory at the moment) but for what you are looking for,.. I think you will like. (What they are testing for in this Beta is not actually enabled,.. there is a need to make reg changes (for a speed increase) so this release is quite stable without the reg edit)

____
Stem

[JRCATES]

Has anybody tried Comodo Personal Firewall in conjunction with a hardware dual firewall (NAT+SPI)/router? I'm wondering if it is compatible, and easy to set up/configure behind one.....

Also, how is the memory and CPU useage these days (since earlier reports seemed to indicate it was a hog)?

[Stem]

Hi JRCATES,
{QUOTE-> Has anybody tried Comodo Personal Firewall in conjunction with a hardware dual firewall (NAT+SPI)/router? I'm wondering if it is compatible, and easy to set up/configure behind one..... <-QUOTE}I have never seen any problems with Comodo and routers, there are rarely problems with any software firewall and routers, the only possibility of problems can come from any needed comms being blocked (example being such as DHCP (if your OS is set up for this) or ARP (address resolution) which if blocked can stop comms). Comodo on installation will "see" the network (router) and allow these comms.

{QUOTE-> Also, how is the memory and CPU useage these days (since earlier reports seemed to indicate it was a hog)? <-QUOTE}The last install I made, this was 25-30mb, Melih reported that the next version release would be taking this to below 20mb

[JRCATES]

Thanks, Stem.....much appreciated :thumb: ;D

Just a quick follow-up: How can I check to see if my OS is set up for DHCP....as well as for ARP (address resolution) to make sure that nothing is blocked? :(

[Stem]

{QUOTE-> How can I check to see if my OS is set up for DHCP.... <-QUOTE}The need for DHCP is if the router (in this case) is issuing your PC with an IP. You can check your setting for the PC IP,. start / control panel / network connections / "right click your network adapter" properties / "in the window that opens, look down the list and select" Internet protocol (TCP/IP) then click the properties button. In the window that appears there are options, "Obtain an IP address automatically", if this is selected then your require, and are using DHCP.


{QUOTE-> as well as for ARP (address resolution) to make sure that nothing is blocked? :( <-QUOTE}This is not an option, this is needed as much by your router as by the PC, these comms run in the background.

[JRCATES]

Thanks again, Stem...you da man! ;D

[Stem]

{QUOTE-> Thanks again, <-QUOTE}Your welcome,
I have installed Comodo on many different setups, with DHCP on/off. I never had any problems with internet connections.

[Durad]

So Comodo final or BETA?

[duke1959]

Durad. There is a Beta out now, but Comodo 2.2 is available as the newest released version. At the moment this version can only can be accessed on one user account at a time by signing off one of the other accounts first. However it still protects the entire computer. If you haven't already done so, you can go to the Comodo Forums for much more information on this version, and of course the Beta. You can use the very stable Beta, but I personally am waiting for the final release due out soon. This Final Release promises to have Two User Account Usage along with lower memory. I found Comodo 2.2 very easy to use (It had a Learning Mode, and did a scan for known applications which stopped a lot of ask/deny questions). It was a bit high on memory usage though, which for me slowed down my CPU. Take care.

[Scott-Sutton]

Greetings All,

I wonder if you could help myself with a decision at all. I'm currently using Eset NOD32 AntiVirus System 2.51 as my AntiVirus Protection, Webroot Spy Sweeper 5.0.5. as my AntiSpyware Protection and Windows XP's inbuilt Windows Firewall as my Personal Firewall although I'm currently browsing the Internet behind a NETGEAR DG834 ADSL Hardware Firewall Router with Firmware Version 3. I'm considering installing a Personal Firewall to replace Windows Firewall and filter outbound traffic from my system and I have a number of choices at my disposal.

The first is Jetico. I've never had experience with Jetico mysefl and so I'd find opinions useful. While reading the feature list it certainly looks extensive and withstands the Firewall LeakTester via Steve Gibson's GRC website although I'm not at all keen on the GUI. All in all it looks like a well-built easy to use Personal Firewall but are there unique features of this Firewall I should be made aware of?
Secondly I'm looking into Comodo Personal Firewall and again I'm impressed. The GUI looks clean, intuative and friendly and the resource usage looks excellent and on a par with Eset NOD32 Anti-Virus System which I'm attracted to. I'd like to know which section of Security Comodo Group specialises in as I realise not all companies are equal in specialization in terms of their specific proudcts; for example ZoneLabs specialise in Personal Firewalls and are weaker with their AntiVirus software in comparison to Eset. Again, are there unique features of this Firewall I should be made aware of? As it stands I may use Comodo outright, it looks very friendly.
Least, but by no means last, I have the choice of ZoneLabs ZoneAlarm Free Edition and if I'm blunt, I have had more issues with ZoneAlarm blocking access to my Router than I'd like to remember and as such, if at all, I'd like to not use ZoneAlarm and choose Comodo or Jetico in comparion, although in terms of functionality and unusual features, I think Comodo Personal Firewall has attracted myself the most; experiences with this software welcomed - I'm pleased it's recognised by Windows Security Center.

Does the Comodo installation still install the BHO into Internet Explorer and suchlike, I'd rather not use it nor have it installed on my system if this is the case and if it is then I may have to look to Jetico to replace Windows Firewall, I simply don't want the Toolbar installed on my system if it isn't a requirement that it won't operate correctly without the Toolbar in place. It would be useful if the Toolbar was an optional installation component only; certain users may not wish it to be installed like myself.

Regards,

Scott Sutton

[Melih-Comodo]

{QUOTE-> Greetings All,

I wonder if you could help myself with a decision at all. I'm currently using Eset NOD32 AntiVirus System 2.51 as my AntiVirus Protection, Webroot Spy Sweeper 5.0.5. as my AntiSpyware Protection and Windows XP's inbuilt Windows Firewall as my Personal Firewall although I'm currently browsing the Internet behind a NETGEAR DG834 ADSL Hardware Firewall Router with Firmware Version 3. I'm considering installing a Personal Firewall to replace Windows Firewall and filter outbound traffic from my system and I have a number of choices at my disposal.

The first is Jetico. I've never had experience with Jetico mysefl and so I'd find opinions useful. While reading the feature list it certainly looks extensive and withstands the Firewall LeakTester via Steve Gibson's GRC website although I'm not at all keen on the GUI. All in all it looks like a well-built easy to use Personal Firewall but are there unique features of this Firewall I should be made aware of?
Secondly I'm looking into Comodo Personal Firewall and again I'm impressed. The GUI looks clean, intuative and friendly and the resource usage looks excellent and on a par with Eset NOD32 Anti-Virus System which I'm attracted to. I'd like to know which section of Security Comodo Group specialises in as I realise not all companies are equal in specialization in terms of their specific proudcts; for example ZoneLabs specialise in Personal Firewalls and are weaker with their AntiVirus software in comparison to Eset. Again, are there unique features of this Firewall I should be made aware of? As it stands I may use Comodo outright, it looks very friendly.
Least, but by no means last, I have the choice of ZoneLabs ZoneAlarm Free Edition and if I'm blunt, I have had more issues with ZoneAlarm blocking access to my Router than I'd like to remember and as such, if at all, I'd like to not use ZoneAlarm and choose Comodo or Jetico in comparion, although in terms of functionality and unusual features, I think Comodo Personal Firewall has attracted myself the most; experiences with this software welcomed - I'm pleased it's recognised by Windows Security Center.

Does the Comodo installation still install the BHO into Internet Explorer and suchlike, I'd rather not use it nor have it installed on my system if this is the case and if it is then I may have to look to Jetico to replace Windows Firewall, I simply don't want the Toolbar installed on my system if it isn't a requirement that it won't operate correctly without the Toolbar in place. It would be useful if the Toolbar was an optional installation component only; certain users may not wish it to be installed like myself.

Regards,

Scott Sutton <-QUOTE}

Scott

Comodo firewall never (NEVER) installed any BHOs or whatsoever!
Its just a firewall, nothing more. ok ok, its a great firewall :-) (but no other stuff)

Melih
Comodo

[AnthonyG]

Can I ask will the registry hack mentioned for the latest beta help it to shut down windows faster. As on my Windows 2000 SP4 since installing the beta it is taking a good 2-3 minutes longer to shut down (my desktop goes, but it stays at the saving settings bar for this time before powering down).

Also i still get repeated popups for the same applications. It does get annoying.

[JRCATES]

Haven't heard much (or any) mention of Comodo in these forums for a while. Any word on when the latest (current) version is due out of beta, and if it has successfully addressed the memory and CPU issues that people were speaking of for earlier versions?

[aigle]

the new beta will be out in a week with less memory usage, but it will still be a bet.

[TOMxEU]

I have just installed 2.3 beta and memory usage dropped from 40-50 MB to 15-30 MB. http://www.wilderssecurity.com/images/smilies/thumbsup.gif

[zoso]

It seems this is a really good firewall.

Can I just ask if it's worth me switching from Sygate Personal Firewall Pro - is there any benefit to me?

[Edwin024]

It's free... and still exists :)

[Chamlin]

Currently saddled with a recently turned slugggggish system. Running Norton Internet Security 2006 which I think is the culprit (I'll explain.) Anyway, I'm looking at replacing it with Comodo Firewall and a small footprint / effective antivirus option.

When I removed NIS2006, my system was lightning fast. NIS had hiccupped last week and started popping up messages that required clicking OK multiple times to use the computer, "Norton AntiVirus 2006 does not support the repair feature...". Did the fixes, no better. Uninstalled/reinstalled, no better. So looking at canning it.

Also using Spysweeper, spywareblaster, Ad-aware, and was using spybot, but on reinstall of NIS Norton said get rid of it, so I did (for now.)

Any advice on...if the system was Totally fast without NIS, would it definitely be the culprit? (don't egg me for being ignorant, please.)

Would comodo be compatible with the spyprotectors above, including spybot? And are there any AVs it's not suited for?

thanks,
bruce

[AJohn]

{QUOTE-> Currently saddled with a recently turned slugggggish system. Running Norton Internet Security 2006 which I think is the culprit (I'll explain.) Anyway, I'm looking at replacing it with Comodo Firewall and a small footprint / effective antivirus option.

When I removed NIS2006, my system was lightning fast. NIS had hiccupped last week and started popping up messages that required clicking OK multiple times to use the computer, "Norton AntiVirus 2006 does not support the repair feature...". Did the fixes, no better. Uninstalled/reinstalled, no better. So looking at canning it.

Also using Spysweeper, spywareblaster, Ad-aware, and was using spybot, but on reinstall of NIS Norton said get rid of it, so I did (for now.)

Any advice on...if the system was Totally fast without NIS, would it definitely be the culprit? (don't egg me for being ignorant, please.)

Would comodo be compatible with the spyprotectors above, including spybot? And are there any AVs it's not suited for?

thanks,
bruce <-QUOTE}

My advise:

Get rid of NIS, after uninstalling and rebooting run their cleanup tools: http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2006031710323113?Open&docid=2005033108162039&nsf=tsgeninfo.nsf&view=docid

After you have finished complete removal of all Norton products your computer should be much faster (the regular uninstaller probably left behind registry entries).

Now install either Comodo Personal Firewall or Outpost Personal Firewall (both are extremely secure and Comodo is free). Either way there should be no issues with other software.

You seem to be leaning towards an Anti-Virus, but there are other solutions. Do some reasearch and find which solution is best. Here are some ideas:

Defense Wall HIPS
Safe'n'Sec
Process Guard
Spyberus
App Defend
GeSWall
System Safety Monitor

All of the above options should be easy to get the hang of. Maybe do some searching in these forums to get a good idea of which may suite you best. If you decide to use one of these or something simular, an antivirus could also be used depending on your system resources and needs. Also, the antivirus I recommend is NOD32.

[AJohn]

{QUOTE-> It seems this is a really good firewall.

Can I just ask if it's worth me switching from Sygate Personal Firewall Pro - is there any benefit to me? <-QUOTE}

There are many aspects I can go over, but since Sygate is a dead product I will simply answer you: Yes.

[Chamlin]

AJohn, thanks for your reply. So I'm a go for Comodo. Re: Antivirus, or other defender types you listed, I have no clue what these are, and haven't come across them in the AV discussion threads I've gone through. How do they compare to the best of the AVs?
Defense Wall HIPS
Safe'n'Sec
Process Guard
Spyberus
App Defend
GeSWall
System Safety Monitor

I was thinking of going with either CA E-trust (free with rebate), but after being around this forum, am now considering NOD32 or BitDefender.

Your thoughts? Anyones' thoughts?

Thanks,
Bruce

[19monty64]

BitDefender is good, but it does tend to conflict with a few a/s-apps. such as SpywareBlaster/Guard and SuperAntiSpyware in my experience. I have heard of other conflicts but can't think of which ones it was. I use AntiVir but have not heard of conflicts with Nod32, so that would probably be the better choice.

[sukarof]

I just downloaded this firewall, and wow. It seems great so far. The memory consumption is quite high, about 75Mb including the AV, but as I understand they are working on it. It doesnt slow down my system.
I do find it amazing that they offer this for free. I am impressed.

[AJohn]

{QUOTE-> AJohn, thanks for your reply. So I'm a go for Comodo. Re: Antivirus, or other defender types you listed, I have no clue what these are, and haven't come across them in the AV discussion threads I've gone through. How do they compare to the best of the AVs?
Defense Wall HIPS
Safe'n'Sec
Process Guard
Spyberus
App Defend
GeSWall
System Safety Monitor

I was thinking of going with either CA E-trust (free with rebate), but after being around this forum, am now considering NOD32 or BitDefender.

Your thoughts? Anyones' thoughts?

Thanks,
Bruce <-QUOTE}

The products I mentioned all use different, but simular methods of protecting your PC. They are not an antivirus because they do not use signatures; They are 'Host Instrusion Prevention Systems (HIPS)' and use more pro-active methods. Try googling some of them and check out their websites ;D

[Sid.D]

Historically have used Tiny, but due to CA's lack of development I decided to try Comodo's product on my laptop. I've been running for well over a month and the firewall and a/v programs from Comodo are rock solid.

sd

[djg05]

I have been looking at the Comodo forums and see that the activation process is a digital certificate. It is said so as to know how many installed versions of it there are.

Does these mean that the f/w is regularly contacting Comodo to let them know it is stlll installed, or can it also be used as a tracking device on your activity? Really not sure how these things work.

[Melih-Comodo]

{QUOTE-> I have been looking at the Comodo forums and see that the activation process is a digital certificate. It is said so as to know how many installed versions of it there are.

Does these mean that the f/w is regularly contacting Comodo to let them know it is stlll installed, or can it also be used as a tracking device on your activity? Really not sure how these things work. <-QUOTE}


A Digital Certificate is only some data that is digitially signed. It is passive and not tracked. They do not serve any purpose apart from "activating" the product once and never used again (actually their shelf life is limited and expires after activation). Its a simple replacement to "serial numbers" used for activation, nothing else!

Hope this clarifies the issues.
thanks
Melih

[AJohn]

All that I can say is this:

Comodo is a company in which you can trust. I have contacted Melih and am sure he will clear things up.

Edit: See, he is so fast that before I can even post he does ;D

[DarkX]

{QUOTE-> All that I can say is this:
Edit: See, she is so fast that before I can even post she does ;D <-QUOTE}

I know this is off topic but Melih is a male name in turkish language ::)

[Melih-Comodo]

{QUOTE-> I know this is off topic but Melih is a male name in turkish language ::) <-QUOTE}

Indeed!
Melih is a male name!! :-)

Melih

[AJohn]

Thanks, I edited my post. I actually knew Melih was a male, but did a typo :gack:

[Chamlin]

I've been using Comodo Firewall for several days now and for the most part it seems good. My concerns are that after scanning for known apps, and proactively adding other programs to the okay list:

1. My Mozy backup keeps saying that it can't access it's servers. I've removed the Mozybackup and Mozyconfig from the okay list, shut down, then re-added them as approved programs, but still I can't get through.

2. I keep getting numerous incidents of Firefox needing approval. Very big hassle. Seems like I'm always clicking.

This may well be my inexperience with the program, not the fault of the program. I'll give Comodo the benefit of the doubt here.

[Goop]

I'm a relative newbie to the PC and Windows having used a Mac all my life but I decided to switch to the other team on my next computer and decided to try Windows XP on a real PC not using apple's BootCamp.

The first thing I was told by my PC friends was to get a better firewall than the regular XP firewall and AV software so I did a bit of research and, long story short, I decided AVG free and COMODO would be the choices I would try. COMODO has been a very pleasant surprise and I have absolutely no complaints so far especially after reading the posts on this forum. I now feel happy I made the right choice.;D

However, I have one question that's driving me crazy and it's simply why does COMODO keep flagging all my svchost services even though it itself tells me it's a safe process and I've specifically told it to let it through. No big deal though because this is an excellent program. Thanks.

[twl845]

I am a relatively new Comodo user, and I think it's great. I have it set to automatic and it runs itself. After using ZoneAlarm for a few years and putting up with the uncertainties of bugs and bad upgrades that could affectively stop you in your tracks, Comodo is a breath of fresh air.;D

[Jokimoto]

New to this forum, though I've searched it dozens of times (all of them useful, so thnx for that :) ).
I'm downloading Comodo now, after finally tiring of ZA Free's inability to work with most torrent clients. It simply puked and gave up the ghost every time I ran uTorrent or Azureus.
I'm running Sygate's free version at the moment, but the interface isn't very user-friendly for a knucklehead like myself.
So after reading 7 pages of discussion here and many more in other forums I'll give this one a go.
Thnx again to all who've given their time and advice in the past.

[jrspie]

NOD32, Comodo, Prevx1, Ewido free, Adaware free and Spyware Blaster.
All for a few months now with no problems.
Enjoy.

[Salamander]

Is Comodo vista ready?

[Jokimoto]

Very nice firewall. No more email activation with the newest version: free forever right from the start. More options than my limited brain knows what to do with.
I do have to shut it down when I go to game online. That's only because it's set to check when new components are loaded, and it was a pain in the ass giving the o.k. for dozens of .dll's
Other than that, first class. Runs right around 25mb.

[Pedro]

Start the game minimized, and answer the pop-ups. If you shut it down, it defeats the FW purpose.

[WSFuser]

@Salamander - not yet

@Jokimoto - u can also set the component monitor to learning mode and then run the game. afterwards just set it back to enable.

[yeow]

Hi Stem,

Thanks for your step-by-step guide: Comodo Firewall (basic setup) (http://www.wilderssecurity.com/showthread.php?t=145704). I always refer to it whenever I want to clean install Comodo.

Would like to clarify post#5, on allowing inbound connection for p2p client, should the protocol selected be "TCP or UCP" instead of only "TCP"?

Thanks,
yeow

[Stem]

Hello yeow,
My example was just to show how to place an inbound rule.
For some P2P/torrent clients, a second port may be needed, as example with Emule, there is a need for an inbound TCP, and an inbound UDP, these are on different ports. With Utorrent both UDP and TCP need to be allowed inbound on the same port.
So it depends on what P2P/torrent client you are using.

Regards,
Stem

[yeow]

Oh I see, much thanks for your clarification!

[Nature]

I just want to add that for DC++ it seems like you have to set both TCP and UDP at the same port number to get the search to work properly.

Other obvious things that some users seem to forget, is to turn off the "random port" option if the app has one... :)
You should also uncheck "enable UPnP" if there is such option.

If you are a "noob" both at computers and firewalls, there is a video guide for installing the firewall with "auto" option. Video guide (http://www.nordicnature.net)
Go to tutorials.

Hope this helps.

[cryon]

Hi,

I'm a newbie using Comodo Firewall (2.4.17.183).
Currently after installing, I'm having DDOS attack (UDP Flood) on my computer. The attackers are basically from all my internal LAN network.

Date/Time :2007-02-07 13:09:46
Severity :High
Reporter :Network Monitor
Description: DDOS Attack (UDP Flood)
Duration: 28 seconds # of packets: 588 # of attackers: 111
Attacker(s): -
The firewall has switched to EMERGENCY mode

My questions is
1. There's a setting in the Comodo firewall, under advanced attack detection and prevention, which states the TCP/UDP packet is 50. Should I increase the packets setting or just leave it at default.

2. What can I do??

Any advise given will be appreciated. Thanks in advance.

[cheater87]

When my laptop was connected to my Uncle's wireless router I kept getting those attacks. I had it block them for an hour after it tries to get it.

[pcalvert]

Does Comodo still store its firewall rules in the Windows registry?

Phil

[WSFuser]

last i checked, yes it does.

[gamersmile]

After spent hours reading this lengthy post, I've decided to give Comodo a try. Of course, I will install it on my VM machine.

Currently I'm using Zone Alarm Pro 5.5, which works great with my Emule, Bitcommet and other apps. At present I don't have plans to replace ZA

Thanks Stem, Melih and other experts for your instructions!

I will report my testing result to this forum later on.

[srinat]

I'm new to this forum and have been using Comodo firewall sice ver2.2.(and love it)So when is ver3 scheduled for release?:)

[twl845]

Srinat - As they keep telling people on the Comodo forum, "it'll be ready when it's done". ;D I'm not in any hurry, because version 3 will have sandbox and HIPS, and I have alot to learn before I'll know what I'm lookin' at.

[taragem]

I'm dumping Comodo because it won't allow some of my games to run (BF2, COD2). I looked through their forum and an admin said to set TCP/UDP to allow all and move it to the top (done), games still won't run. Contacted tech support and have been getting "we'll get back to you" for a week. It's impossible to turn it completely off without uninstalling and, from what I've gathered, puts registry flags. I'm fed-up. There's not much that irks me more than unresponsive or incompetent tech support. >:(

[twl845]

Did your games run OK before you installed CFP?

[Pedro]

If they don't run by simply allowing the pop-up (alt-tab while runing the game), then you probably need to adjust the network rules/ app rules. Look for info on your games as to what settings are needed for a firewall- ports, protocols, addresses...

[taragem]

{QUOTE-> Did your games run OK before you installed CFP? <-QUOTE}

Yes, they ran fine.

[taragem]

{QUOTE-> If they don't run by simply allowing the pop-up (alt-tab while runing the game), then you probably need to adjust the network rules/ app rules. Look for info on your games as to what settings are needed for a firewall- ports, protocols, addresses... <-QUOTE}

I don't know what you mean by "allowing the pop-up." Alt-tab minimizes the game. As I said, I already tried setting all ports open and also put the games in the FW's allowed programs.

But that's only half the problem, the other is comodo's piss-poor tech support. But I guess that's what you get for free. :thumbd:

[Pedro]

Keep in mind that this is freeware, and your problem is related to a game.

Are you able to allow the pop-up, and set to remember? Check the logs to see if you didn't answer some.
The main problem is games that start in full screen, and you don't see the pop-up. Try to start the game with min. window. If you open Comodo GUI, and then run the game, probably it starts min., and you're able to answer the pop-ups. I don't know why, and i don't run that many games note, but this works for me somehow.

If that doesn't work, i repeat, get the specs for the game, to see what it needs to connect.

edit: you answered. Does anything appear to be blocked in the logs, when you run the game?

[taragem]

{QUOTE-> Keep in mind that this is freeware, and your problem is related to a game. <-QUOTE}

No, the problem is related to the FW.

But that's moot now since I'm installing another FW.

[Pedro]

Good. Find the one that suits you.

[candoo]

I have ZASS 7 on my system and I am fed up of Clean unistalls and Clean installs, every time there is a new version or problem. I had to downgrade to Ver 6 because the Kaspersky AV died on me. So I heard good things about Comodo FW. I have Counter Spy V2 and was thinking adding Comodo FW and Antivir AV. Are all three compatible?

Candoo

[Pedro]

I don't see why not. They should work fine imo

[twl845]

candoo - As a Comodo user, I think you made a great choice. I am using it with NOD32 and would suggest it rather than Comodo AV. You could read the Comodo AV forum in the help section and get a better picture of what their AV is like. I just Know the firewall and NOD32 go well together. As an ex ZASS user, I feel your pain. :blink:

[Pedro]

twl845: i think he means Avira Antivir+ Comodo FW.
It's still in beta, i too don't recomend it to anyone yet (Comodo AV). Only if you're up to test software and report bugs and issues. Not to rely on it, for now at least.
Avira should be fine.

[twl845]

Someone - Thanks for the heads up. These old eyes are shot.:blink:

[Pedro]

Nah, it's his fault!;D
Don't worry, we read too fast sometimes, and miss the obvious.

[Stan The Man]

Comodo works very well in my particular set up, but when I started it was a little problematic. I was also slightly "heavier" than I had been used to. But then a program of this type is going to have a learning curve and will have to be reasonably complex if it is going to be capable. In one recent independent test of Firewalls CPF was seen to be out in front and has been further improved since.

For those having problems with CPF I would respectfully suggest that they visit:-

Comodo Forums (http://forums.comodo.com/)

There are many people there, including support staff, willing to help. It certainly worked for me.

[candoo]

I thought that Antivir 7 has been out beta for a while now. I see that AV Comparatives rated it Advanced +. Does Comodo have the same features as ZA and is it as easy to use? I have heard that some people have a hard time to uninstall it from their system. I don't want another ZA. Do they have an uninstall tool?

Candoo

[Pedro]

I'm sorry if i confused you: Comodo AV is the one in beta.

Go with Avira Antivir or Avast!:thumb: These are not in beta and are good.

Yes there is an uninstaller for the Comodo Firewall: http://forums.comodo.com/index.php?PHPSESSID=3f25947e26929d3ef8a5c1208c12fe9d&topic=5326.0
Only if you have problems uninstalling, i guess. I'm trying another, and had no problem uninstalling Comodo.

[alakazooo]

Hi all,

Every one seem to have problems with that prog. . I don't, except one a little one.
According to Pc Magazine, Nov. 2006 I think, comodo firewall was the best free firewall. Even better than ZoneAlarm.

Since i've installed it everything is fine. I didn't found any prog. that I didn't wanted to get connect on the net. Except winamp, I just don't know why he want to.

The Problem : in Activities parts there's a News part which report every connections that the program blocked in the past 5 days. There I see something who try to connect, and it's automatically blocked, every 20 seconds.
I really don't know where I can see what is trying to connect and how to delete that thing.

Comodo send me that message in news window:

!Medium | Network Management | Entrance politics violation (Refused acces, IP = (a IP wich may be my rooter's IP) , Port = xxxx (a number that I think it's not a good idea to give)

is it really my rooter who's trying to connect every 20 sec and if it is...is it bad to block it? or how can I set comodo to allow it?

When this is hapenning the only programs running (wich I can see beside of the window's clock) are AVG free, AVG anti-spywares, Spybot Search&Destroy and ATI (graph card) ...and comodo firewall...



Does someone can help me pls? I want to find what try to connect every 20 sec and crush it.

Thanks a lot to read and help me.