PDA

View Full Version : Bit Tornado rule for Comodo


Joliet Jake
May 16th, 2006, 01:38 PM
Hi,
I used this rule someone gave me for allowing Bit Tornado through Comodo...

Allow TCP in from ANY to MY IP where source port is ANY and remote port is the ports I set Bit Tornado to use.
Allow UDP in from ANY to MY IP where source port is ANY and remote port is the ports I set Bit Tornado to use.

Despite this rule being above the block rule I am still having problems with inbound connections. Log message...

Date/Time :2006-05-16 18:24:25
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 172.xxxxxxxxxx, Port = 50000)
Protocol: TCP Incoming
Source: 193.xxxxxxxxxxxxxx
Remote: 172.xxxxxxxxxxxxxx
TCP Flags: SYN
Reason: Network Control Rule ID = 3

Rule ID = 3 is the block rule; Block and log IP in from IP ANY to IP ANY where IPPROTO is ANY

I have posted a help on their forum but I wondered if anyone here could help.:D

Thanks in advance...

JJ8)

Stem
May 16th, 2006, 06:04 PM
Are these "network rules"?
If yes, then change your "source port" to the one in your torrent client, and the "remote port" to any.
I am just starting to look into this firewall more deeply. So I will be setting up a few apps to check the comms (on app will be a torrent client). But for now, change the ports as I mentioned to check.

EDIT,
Have just ran a torrent client with the "network" rules I suggested, but Comodo is still blocking the inbound.

Joliet Jake
May 16th, 2006, 07:40 PM
Thanks for the reply Stem.

What does this mean in the log?....TCP Flags: SYN

Stem
May 16th, 2006, 07:56 PM
SYN flag= connection

For TCP connections there is an handshake.
-> SYN
<- SYN ACK
-> ACK
Then the data flow.