Why Pick Other Firewalls Over Comodo Personal Firewall?

[Coolio10]

I started this as i want to know why you would use any other firewalls over comodo pf?

First of all it blocks ever test on firewallleaktester and shieldsup. Second no slowdown in system performance (21.000kb max for me with its 2 processes) (launchpad off)
Third extremely well designed interface and non intrusive alerts as most firewall alerts appear in center of screen which is annoying for some.
Fourth extremely featureful and easy.

Im sure there were problems with 2.2 but this new version fixes every problem im sure.

The launchpad gone and less mem,cpu usage. those are just the main fixes.

My main reasons are it blocks more or the same as the best free or paid firewall out there, Uses less resources then most and look at the price tag..Oops there isnt one...Oh wait a minute there is $00

[ccsito]

I have not used the program so I cannot give an opinion at this point. The program will not work on older PC system such as those with Windows 98, so it is a no go with those computers.

[rdsu]

I agree with you, this is a great firewall with an excellent support, and it's free!!!

I already used a lot of firewalls and only this fits my needs!
CHX is the best for incoming traffic but lacks application control and other features, like self protection...

The next version of Outpost Pro is the only firewall that I think that can compete with Comodo PF, or not... ;D

[Coolio10]

-{ Quote: "I have not used the program so I cannot give an opinion at this point. The program will not work on older PC system such as those with Windows 98, so it is a no go with those computers." }-
Well you have a point but what about others with supported systems.

[WSFuser]

i too havent tried comodo, but rule making makes me uneasy and hesitant to try it.

[Peter2150]

Hi Coolio10

I realize your are probably in love with the comodo firewall for some reason, based on all your posts, but I tried it and didn't like it. That's why I am not using it.

Pete

[rdsu]

-{ Quote: "i too havent tried comodo, but rule making makes me uneasy and hesitant to try it." }-
Read this: ** FAQs/Threads - Read Me First ** (http://forums.comodo.com/index.php/topic,894.0.html)

If you still have some doubt, you can post on Comodo Forum...

[WSFuser]

i just tried comodo and i think ill stay with looknstop for the moment. its lighter, simpler, and i already have my rules setup.

[Coolio10]

-{ Quote: "i too havent tried comodo, but rule making makes me uneasy and hesitant to try it." }-
They put in a low and very high setting alerts so its even simpler now!

Its like ZA Free when its on low but blocks more so its extremely simple for beginners too.

[Coolio10]

-{ Quote: "Hi Coolio10

I realize your are probably in love with the comodo firewall for some reason, based on all your posts, but I tried it and didn't like it. That's why I am not using it.

Pete" }-
Could you please tell me why you dont like?
Just so i can prove you wrong :D just joking!

[Coolio10]

-{ Quote: "i just tried comodo and i think ill stay with looknstop for the moment. its lighter, simpler, and i already have my rules setup." }-
Could you please tell me when you tried so i know if u used new 2.3 or old 2.2 as 2.3 is a lot lighter, simpler and secure as ever (wont even let me shut it down completely :D)

[Peter2150]

-{ Quote: "Could you please tell me why you dont like?
Just so i can prove you wrong :D just joking!" }-

Frankly, I don't remember at this point. I just installed it, didn't really like it, so I took it off.

[Joliet Jake]

Love this firewall (Comodo)
Shows what can be acheived and they are extremely helpfull into the bargain.

[MICRO]

-{ Quote: "Could you please tell me why you dont like?
" }-
Cool.,
Apparently Comodo will do better now that it's dumped the bundle - what was it called again - Launchpad - nobody likes bundles, free or not.

Regards.

[WSFuser]

-{ Quote: "Could you please tell me when you tried so i know if u used new 2.3 or old 2.2 as 2.3 is a lot lighter, simpler and secure as ever (wont even let me shut it down completely :D)" }-
i tried the comodo v2.3 just today and it was light, but LnS is lighter. and by simple I mean looknstop just prompts once for each application (i think comodo can do that too but i didnt bother with that setting).

also it is slow to initialize. some error about FUS being disabled (which it is). and although u can (easily) disable teh launchpad, i dont liek it.

i think comodo is ok, but its too much for me.

[luckykar]

First of all hi everybody this is my first post here at Wilders , i just uninstalled ZA and installed Comodo Firewall it seems very nice , its an easy setup and works real well on my system.

Cheers

edit: Thanks to the guys at Comodo for this Firewall.

[Coolio10]

-{ Quote: "i tried the comodo v2.3 just today and it was light, but LnS is lighter. and by simple I mean looknstop just prompts once for each application (i think comodo can do that too but i didnt bother with that setting).

also it is slow to initialize. some error about FUS being disabled (which it is). and although u can (easily) disable teh launchpad, i dont liek it.

i think comodo is ok, but its too much for me." }-
It doesnt actually require initializing time but your one of the rare 2 who has a process which doesnt make it happy.

You mean this error....

http://forums.comodo.com/index.php/topic,1592.msg15243/topicseen.html#msg15243

http://forums.comodo.com/index.php?action=dlattach;topic=1592.0;attach=613;image

It does have the 1 prompt per app option and according to site it uses atleast 32MB "32 Mb or higher" And Comodo uses 15-22 max depending on system. Please show an image of your task manager with outline of looknstop processes so i can see if its "lighter" because comodo also has no cpu load just mem usage.

If ive won you over then just put a angry smile :D

[Brian N]

I like Sygate alot better.
It has a more clean interface, less resource usage (no idea why a firewall (comodo) should use 40mb of memory...) and it makes my pc run alot smoother.

[Hipgnosis]

-{ Quote: "I like Sygate alot better.
It has a more clean interface, less resource usage (no idea why a firewall (comodo) should use 40mb of memory...) and it makes my pc run alot smoother." }-

The new version doesn't use 40MB of memory. The two processes (cpf and cmdagent) combined use 23MB on my system.

[WSFuser]

-{ Quote: "It doesnt actually require initializing time but your one of the rare 2 who has a process which doesnt make it happy.

You mean this error....

http://forums.comodo.com/index.php/topic,1592.msg15243/topicseen.html#msg15243

http://forums.comodo.com/index.php?action=dlattach;topic=1592.0;attach=613;image" }-
from the first thread...do i need terminal services for comodo to function properly?

i cannot access the second link, i dont have a forum account.
-{ Quote: "Please show an image of your task manager with outline of looknstop processes so i can see if its "lighter" because comodo also has no cpu load just mem usage." }-
this is from Process Explorer:

[BlitzenZeus]

Here is one thing I couldn't find off the pages, does it support internet connection sharing without being a royal pain like in every other software firewall I tried in the past, however my current software firewall makes it very easy, along with almost all of the firee firewalls do not support internet connection sharing, and for certain reasons this is required on my system.

Also what is the current status of support in Vista?

This thread seems like astroturfing to me, however I will bite...

[rdsu]

-{ Quote: "Here is one thing I couldn't find off the pages, does it support internet connection sharing without being a royal pain like in every other software firewall I tried in the past, however my current software firewall makes it very easy, along with almost all of the firee firewalls do not support internet connection sharing, and for certain reasons this is required on my system." }-
Yes, it supports ICS, but I never use it so I can't tell you how it works...

http://img215.imageshack.us/img215/5446/icsmk1.png

-{ Quote: "Also what is the current status of support in Vista?" }-
I think that isn't support right now, but they will add...

[zapjb]

-{ Quote: "I like Sygate alot better.
It has a more clean interface, less resource usage (no idea why a firewall (comodo) should use 40mb of memory...) and it makes my pc run alot smoother." }-
I concur. Sygate is great here. Only using 9MB RAM. The only other pf I'd consider would be GhostWall. Possibly older Kerio.

[RejZoR]

Sygate is badly outdated. Very good for (also outdated) Windows 9x but certanly not recommended for Windows XP...

[zapjb]

I disagree. And RejZoR if you have any reliable sourced information to back up your point. I'd like that link.

[trojan]

from what i remember sygate and kerio preform very poorly on leak tests, did anything change? sygate also droped all outbound protection for proxys as 127.0.0.1 was auto allowed has this changed?

i see no real reasons from these posts for not using comodo , other than lazyness and a stubboness to stick with previous software ie ( my rules are already made for look n stop lol ) why would anyone use a firewall that leaks more than 1 that doesnt, for the sake of a few mb of ram , makes no sense to me :D

[zapjb]

Jeez Sygate has never failed any leaktest I've put it through. ???

[Coolio10]

-{ Quote: "from the first thread...do i need terminal services for comodo to function properly?

i cannot access the second link, i dont have a forum account.

this is from Process Explorer:" }-
Yes you do need terminal services running and the second link was just an image of the fast user switching problem you may have.

comodo is deffinitely lighter as lns uses around 70kb and my comodo uses about 20kb

[mercurie]

Fellow Creatures,
Well... I am considering giving these a try. If I do I will likely dump my free ISP McAfee AV and Firewall for the AOL/KAV 12 month free AV and new Comodo Personal Firewall, however I will need internet connection sharing to work without lots of headache. I do have trouble with this.

Any thoughts on this combo. or generally is this a poor move in ones opinion? :-\

(This would be for the Family Machine)

[Coolio10]

-{ Quote: "Fellow Creatures,
Well... I am considering giving these a try. If I do I will likely dump my free ISP McAfee AV and Firewall for the AOL/KAV 12 month free AV and new Comodo Personal Firewall, however I will need internet connection sharing to work without lots of headache. I do have trouble with this.

Any thoughts on this combo. or generally is this a poor move in ones opinion? :-\

(This would be for the Family Machine)" }-
Well comodo is suppose to automatically configure itself at installation with a choice of automatic and manual as it found my internet connection straight away and im on a wired router with 2 computers but i have no idea about Aol AVS because i sent off the request and didnt bother to try it as i was scared it would brake my computer. Its KAV but with AVG style so a basic avg with better interface and better definitions and detection. Some people say it brakes computer and some say it slows down but some also say its best free av so far so its in your hands unless someone reccomends.

Check this site for some reviews http://www.download.com/AOL-Active-Virus-Shield/3640-2239_4-10568703.html?tag=tab_ur

[unhappy_viewer]

-{ Quote: "I disagree. And RejZoR if you have any reliable sourced information to back up your point. I'd like that link." }-
Anything that is no longer supported is outdated and outdated security products are always a no-no. Vulnerbilities get found by hackers and can be exploited easily since its not going to be fixed at all. Security Bulleteins do not publish vulnerbilities for unsupported products since technically people should not be using unsupported products. These vulnerbilities can be exploited for a very long time by hackers and probably the only way you could know is delve into Internet's Underground.

[WSFuser]

-{ Quote: "i see no real reasons from these posts for not using comodo , other than lazyness and a stubboness to stick with previous software ie ( my rules are already made for look n stop lol ) why would anyone use a firewall that leaks more than 1 that doesnt, for the sake of a few mb of ram , makes no sense to me :D" }-
yes i am lazy but LnS does pretty good against leaktest
-{ Quote: "Yes you do need terminal services running and the second link was just an image of the fast user switching problem you may have." }-
...i removed terminal services using nlite...
-{ Quote: "comodo is deffinitely lighter as lns uses around 70kb and my comodo uses about 20kb" }-
which processes are u comparing? ive uninstalled comodo but it certainly wasnt as light as LnS.

[Peter2150]

-{ Quote: "
i see no real reasons from these posts for not using comodo , other than lazyness and a stubboness to stick with previous software ie ( my rules are already made for look n stop lol ) why would anyone use a firewall that leaks more than 1 that doesnt, for the sake of a few mb of ram , makes no sense to me :D" }-

This comment almost has an air of arrogance about it. The implication is Comodo is the only show in town, and if everyone doesn't uses it then one is at best stubborn. I am afraid I don't buy that.

I use Ghostwall, and right now am quite happy with it. It doesn't provide any outbound protection, so obviously I am nuts. Of course Appdefend, and SSM provide excellent network access control, but still I guess I am stubborn.

Frankly this whole thread had the same air about it. I have no beef with Comodo, it's probably fine, but there are also other good firewalls. Different strokes for different folks.

[TOMxEU]

-{ Quote: "yes i am lazy but LnS does pretty good against leaktest" }-
Comodo passes all leak tests as well. ;)
-{ Quote: "do i need terminal services for comodo to function properly?" }-
I read on forum, that it should be fixed via update in one week, we will see.
-{ Quote: "i tried the comodo v2.3 just today and it was light, but LnS is lighter." }-
LnS seems to be lighter, Comodo's 2 processes takes about 10-22 MB on my PC.
-{ Quote: "Frankly this whole thread had the same air about it. I have no beef with Comodo, it's probably fine, but there are also other good firewalls. Different strokes for different folks." }-
This thread just want to point out at a good freeware firewall, to let people know about it.
There are so many freeware, it is not possible to try out all, so threads like this helps a bit.

Some people use outdated firewalls, which are so vulnerable and they even do not know about it, because if the software is abandoned, security pages like Secunia do not pay attention to it. Eg if someone uses Outpost 1.0 Free, it is like he has no firewall, because there is more than 2 years old bug, thanks to which a hacker can access user's system with administrator rights.

[sukarof]

-{ Quote: "
i see no real reasons from these posts for not using comodo , other than lazyness and a stubboness to stick with previous software ie ( my rules are already made for look n stop lol ) why would anyone use a firewall that leaks more than 1 that doesnt, for the sake of a few mb of ram , makes no sense to me :D" }-

I think those comments are a bit harsh. We understand that some do get a bit over enthuastic, to the border of fanatism almost, such comments wont get new followers. Personally I do get a bit suspicious when the hardcore fans start preaching too much and aggressive.

I do use comodo and I like the feel of it (easy to setup), and thats why I use it. Others who do use other firewalls do it because they like them. It is easy as that. No rocket science. So what if a firewall protects against some leaktests and some dont? How often are the consept behind leaktests actually used in real malware?

btw Comodo does not protect everyone out of the box as claimed. On my machine comodo fails their own leaktest (cpil.exe) this problem is solved. My fault not comodo.

[TOMxEU]

-{ Quote: "I think those comments are a bit harsh. We understand that some do get a bit over enthuastic, to the border of fanatism almost." }-
I understand that feeling, I have the problem to control myself fanatizing others.
It is just so unbelievable, that such a great firewall, better than some paid, is free.

[CJsDad]

-{ Quote: "I think those comments are a bit harsh. We understand that some do get a bit over enthuastic, to the border of fanatism almost, such comments wont get new followers. Personally I do get a bit suspicious when the hardcore fans start preaching too much.

I do use comodo and I like it, and thats why I use it. Others who do use other firewalls do it because they like them. It is easy as that. No rocket science. So what if a firewall protects against some leaktests and some dont? How often are the consept behind leaktests actually used in real malware?

btw Comodo does not protect everyone out of the box as claimed. On my machine comodo fails their own leaktest (cpil.exe)" }-

Good post.

I just started using Comodo myself on another PC that had Kerio 2.1.5, I still use OutPost Pro on my main PC.
I still like K 2.1.5 but I'm using Comodo to see if I like it or not, definitely not in love with the program though or any app for that matter.
I use Comodo because it is my choice just like whatever firewall a person chooses to use its their choice and should be respected but this Comodo "lovefest" is a little crazy, a good firewall, yes, but lets leave it at that.

[Coolio10]

-{ Quote: "Comodo passes all leak tests as well. ;)

I read on forum, that it should be fixed via update in one week, we will see.

LnS seems to be lighter, Comodo's 2 processes takes about 10-22 MB on my PC.

This thread just want to point out at a good freeware firewall, to let people know about it.
There are so many freeware, it is not possible to try out all, so threads like this helps a bit.

Some people use outdated firewalls, which are so vulnerable and they even do not know about it, because if the software is abandoned, security pages like Secunia do not pay attention to it. Eg if someone uses Outpost 1.0 Free, it is like he has no firewall, because there is more than 2 years old bug, thanks to which a hacker can access user's system with administrator rights." }-
Oops i apologize i was looking at virtual size the end bar in your process explorer because i havent used it since i broke my computer 2 months ago.
Youve won your fight :D

[Coolio10]

-{ Quote: "Good post.

I just started using Comodo myself on another PC that had Kerio 2.1.5, I still use OutPost Pro on my main PC.
I still like K 2.1.5 but I'm using Comodo to see if I like it or not, definitely not in love with the program though or any app for that matter.
I use Comodo because it is my choice just like whatever firewall a person chooses to use its their choice and should be respected but this Comodo "lovefest" is a little crazy, a good firewall, yes, but lets leave it at that." }-
Yes your right i did go a bit crazy starting this but cant stop it unless i delete all my posts?
I apologize to everyone for starting this topic because i was crazy at the time and would stop it if i could. I Should of put something less crazier like "What Not To Like About Comodo PF?"

[JRCATES]

-{ Quote: "Yes your right i did go a bit crazy starting this" }-

Yeah, but hey....look at it this way: at least you got over 30 responses in one thread here. I've probably gotten that many in the last dozen or so threads I've started combined, if I'm lucky. (JK) :P And besides, some threads go completely ignored....and I should know, because I've been the thread starter in a few of them ;D :P ;)

Nothing wrong with spreading the word regarding a good, freeware product - people do it here all the time. And besides, there are several "fanboys" of products....so I wouldn't worry about it. I think that perhaps what may have rubbed a few people the wrong way was the wording that insinuated that Comodo is the only firewall worthy of consideration, that's all.....

[Happy-Dude]

Heya guys, I'm switching from ZoneAlarm to Comodo firewall today. Anything I should know about it ?

[trojan]

-{ Quote: "Jeez Sygate has never failed any leaktest I've put it through. ???" }-

what leak tests have you tried ?, The last time i used sygate which was about 5 months ago it didnt even stop the memory process injection used by the trojan bifrost or the remote tool/trojan poison ivy, sygate was always known as leaky as far as im concerned, it does not stand upto comodo, any malware acting as a proxy can send info via the browser as loopback is trusted with sygate and outbound protection does not work unless this has changed and sygate has improved dramaticly in the last 4-5 months, sygate is a big no no

[mercurie]

The thread title is an invite for discussion. I have no issues here. ;)

[trojan]

I think your aol/kav comodo idea is a good move, im very happy with comodo sofar used it for the last few builds or so , The only real downside to the kav clone is the lack of the web scanner which i like , the kav proactive that the clone doesn't have i find far to noisy and prefer to use prevx or cyberhawk, but still the real time protection with the aol clone will still protect against web threats just maybe not as effeciently as with the webscanner module , i think this aol/kav + comodo is the best free antivirus and firewall combination you could have

[djg05]

I have just tried CPF 2.3.4.5 and initially was reasonably pleased with it. It now passed leaktests that in the past it had not on my machine.

I have now uninstalled it as it will not load correctly from a cold boot and I cannot connect it to my LAN, so I am back to my favourite Kerio 2.1.5, not perfect I know, but with a layered defence and blocked IE still does quite well.

edit
I meant to add that also Kerio remembers my responses with giving me endless pop ups.

[AnthonyG]

I have just this moment installed 2.3 latest from their website.

When i first tried Comodo a few of months back I initially loved the features it offered. Which are better than most retail Firewalls.

But on using 2.1, 2.2 and then 2.3 beta. One thing has been unfortionantly consistant throughout. And this is the constant repeat asking for internet access permission for things you have already repeatedly given perminant permission to.

It gets *very* annoying after a while.

Hope this version has fixed this. But if it was occuring in this versions beta. I am somewhat pessimistic that it will now be fixed.

Hoping though

Thanks
Anthony

[CJsDad]

-{ Quote: "I have just tried CPF 2.3.4.5 and initially was reasonably pleased with it. It now passed leaktests that in the past it had not on my machine.

I have now uninstalled it as it will not load correctly from a cold boot and I cannot connect it to my LAN, so I am back to my favourite Kerio 2.1.5, not perfect I know, but with a layered defence and blocked IE still does quite well.

edit
I meant to add that also Kerio remembers my responses with giving me endless pop ups." }-

Do you mean with or without endless popups?
I'm just wondering because I think that would be annoying to have endless popups come from a program such as a firewall.

[Coolio10]

-{ Quote: "I have just tried CPF 2.3.4.5 and initially was reasonably pleased with it. It now passed leaktests that in the past it had not on my machine.

I have now uninstalled it as it will not load correctly from a cold boot and I cannot connect it to my LAN, so I am back to my favourite Kerio 2.1.5, not perfect I know, but with a layered defence and blocked IE still does quite well.

edit
I meant to add that also Kerio remembers my responses with giving me endless pop ups." }-
Remember if your having any problems you could always just visit the forums which is very fun and friendly. The moderators are made up of mostly comodo lovers so their on a lot. :thumb: http://forums.comodo.com/

Oh forgot to say this to above post it would annoy! Id probably reccomend it to beginners if it had an alert control like comodo

[BlitzenZeus]

-{ Quote: "Yes, it supports ICS, but I never use it so I can't tell you how it works..." }-
Well, maybe I will try it later when I have more free time then, but if I basically have to put an entire lan range as a trusted range then the ICS in this program is useless.

[Coolio10]

-{ Quote: "I have just this moment installed 2.3 latest from their website.

When i first tried Comodo a few of months back I initially loved the features it offered. Which are better than most retail Firewalls.

But on using 2.1, 2.2 and then 2.3 beta. One thing has been unfortionantly consistant throughout. And this is the constant repeat asking for internet access permission for things you have already repeatedly given perminant permission to.

It gets *very* annoying after a while.

Hope this version has fixed this. But if it was occuring in this versions beta. I am somewhat pessimistic that it will now be fixed.

Hoping though

Thanks
Anthony" }-
Well that error was fixed since the latest build of 2.2 but 2.3 is extremely nicer :thumb:
I had that problem in 2.2 because firefox kept coming up with a warning from cpf and there was no remember box but thats because my component monitor was on learning as it is set to default. But for me component monitor in learning mode works fine now in 2.3.

[BlitzenZeus]

-{ Quote: "Do you mean with or without endless popups?
I'm just wondering because I think that would be annoying to have endless popups come from a program such as a firewall." }-
Well if you would have actually configured it properly you woudln't have any to very few prompts for new traffic, depending on how you set it up... You see with Kerio 2.1.5 you have to actually know what your doing, newbies need not apply.

[AnthonyG]

-{ Quote: "Well that error was fixed since the latest build of 2.2 but 2.3 is extremely nicer :thumb:
" }-
Like I said it still occured for me in both 2.2 and 2.3 beta. :(

[Coolio10]

-{ Quote: "Well, maybe I will try it later when I have more free time then, but if I basically have to put an entire lan range as a trusted range then the ICS in this program is useless." }-
Well im not sure cause my 2 computer network was automatically setup at installation so easy for me. Tell me if the image has anything to do with what you want done.

[Coolio10]

-{ Quote: "Heya guys, I'm switching from ZoneAlarm to Comodo firewall today. Anything I should know about it ?" }-
All I Can Say Is Get Ready To Enter The World Of The Easiest And Safest Free Firewall Without Any Bugs(So Far No Bugs Seen Since 2.3 Only).

If you have any questions ask me here or ask at the friendly forum...
http://forums.comodo.com/

[CJsDad]

-{ Quote: "Well if you would have actually configured it properly you woudln't have any to very few prompts for new traffic, depending on how you set it up... You see with Kerio 2.1.5 you have to actually know what your doing, newbies need not apply." }-

BZ
I dont know how you interpreted my post or if you think I was posting about K 2.1.5 giving me endless popups but thats not the case.
I have been using K 2.1.5 for a few months now and I dont receive ANY popups after it has been configured properly and run all my apps.
My question was to the poster before me that said "Kerio remembers my responses with giving me endless pop ups" which I found very unusual.

Right now I'm just messing around with Comodo on a PC that previousy had K 2.1.5 but I dont think its going to last too long.

[djg05]

-{ Quote: "Do you mean with or without endless popups?
I'm just wondering because I think that would be annoying to have endless popups come from a program such as a firewall." }-

Kerio gives one popup/app - end of story

CPF seems to give a lot more and not remember them.

[djg05]

-{ Quote: "Remember if your having any problems you could always just visit the forums which is very fun and friendly. The moderators are made up of mostly comodo lovers so their on a lot. :thumb: http://forums.comodo.com/
" }-

Did that. If I get a reply I may try it again.

Now that I am using Kerio again if feels a tad faster than with Comodo.

[Shotwick]

I tried out comodo today but it didn't last very long. It just didn't remember rules & kept on popping up the same thing over & over again after rebooting, even though I checked the 'remember choice' checks.

Crap, went back to Outpost.

[CJsDad]

-{ Quote: "Kerio gives one popup/app - end of story

CPF seems to give a lot more and not remember them." }-

O.K. now I understand.
I thought you meant you were constantly getting popups with Kerio 2.1.5
By the way I'm also havng trouble with CPF remembering my apps, create a rule in the application monitor only to have CPF popup and ask me if I would like to allow the same app I just made a rule for after I log off and then log back on
Even if I check the box to remember my choice I will still get a popup.

[sukarof]

-{ Quote: "O.K. now I understand.
I thought you meant you were constantly getting popups with Kerio 2.1.5
By the way I'm also havng trouble with CPF remembering my apps, create a rule in the application monitor only to have CPF popup and ask me if I would like to allow the same app I just made a rule for after I log off and then log back on
Even if I check the box to remember my choice I will still get a popup." }-

It is interresting that people can have such different experience. For me Comodo remembers all the rules I give it.
???It is the same with their leaktest, comodo passes for the most people but for some it doesnt (like me) <- problem solved.

[Coolio10]

Ok you i see the problems you guys are having!

Comodo pops up because it is being extremely secure as jetico on its default!
To fix this open comodo and Click Security Tab at the top.
Next Press Advanced On The Left. Then click configure in the miscalaneuous box and where it says alert level frequency put the bar on very low which is 1 popup per app just like most of you want. It comes up twice or more because its asking incoming and outgoing or act as a server alerts. Once its set to very low it will come 1 popup as you all want and all you do is press the remember check box.

Hope this will sway the mind of some as your lucky since the alert control was added in this new release 2.3

[CJsDad]

-{ Quote: "Ok you i see the problems you guys are having!

Comodo pops up because it is being extremely secure as jetico on its default!
To fix this open comodo and Click Security Tab at the top.
Next Press Advanced On The Left. Then click configure in the miscalaneuous box and where it says alert level frequency put the bar on very low which is 1 popup per app just like most of you want. It comes up twice or more because its asking incoming and outgoing or act as a server alerts. Once its set to very low it will come 1 popup as you all want and all you do is press the remember check box.

Hope this will sway the mind of some as your lucky since the alert control was added in this new release 2.3" }-

It's not the popups, its the failure to remember when you create a rule for an app or when you check the box to remember your choice.
When I log off and log back on its as though I never created a rule for the app in the first place.
Also why does the box that pops up for you to remember your choice have those numbers that go in sequence like this 1 of 5, 2 of 5, 3 of 5, 4 of 5 and so on, I've had some apps go as high as 17...1 of 17, 2 of 17, etc.

If you can help me with these questions I have I just might become a "fanboy" of Comodo ;D

[rdsu]

-{ Quote: "Well, maybe I will try it later when I have more free time then, but if I basically have to put an entire lan range as a trusted range then the ICS in this program is useless." }-
Try it, and after tell me the results ;)

[TheQuest]

Hi, CJsDad

-{ Quote: "Also why does the box that pops up for you to remember your choice have those numbers that go in sequence like this 1 of 5, 2 of 5, 3 of 5, 4 of 5 and so on, I've had some apps go as high as 17...1 of 17, 2 of 17, etc." }-
At a guess it is probably the amount of Application Components necessary for access.

Take Care,
TheQuest 8)

[ccsito]

Originally posted by TheTOM_SK

-{ Quote: "Some people use outdated firewalls, which are so vulnerable and they even do not know about it, because if the software is abandoned, security pages like Secunia do not pay attention to it. Eg if someone uses Outpost 1.0 Free, it is like he has no firewall, because there is more than 2 years old bug, thanks to which a hacker can access user's system with administrator rights." }-

If this is true, then the Agnitum Co. should not be offering the program version on their website and PC World should not have made a recommendation of it on a recent magazine article. :wacko:

[Coolio10]

-{ Quote: "It's not the popups, its the failure to remember when you create a rule for an app or when you check the box to remember your choice.
When I log off and log back on its as though I never created a rule for the app in the first place.
Also why does the box that pops up for you to remember your choice have those numbers that go in sequence like this 1 of 5, 2 of 5, 3 of 5, 4 of 5 and so on, I've had some apps go as high as 17...1 of 17, 2 of 17, etc.

If you can help me with these questions I have I just might become a "fanboy" of Comodo ;D" }-
Well mine remembers fine:thumb:
The sequence is just the different components as thequest mentioned and im sure the very low setting fixes this but i cannot explain why you get popups at every startup on same application and theres a simple way to find out.

Check the security window like the image below and make sure you have atleast one program like firefox completely given access as you see in my list each application has atleast 2 or more rules then restart and check that same list and if the rules are still there then im correct about the alerts coming everytime because comodo maybe asking about incoming/ outcoming, udp,tcp and all those other stuffs.

[sukarof]

I claimed earlier in this thread that Comodod didnt pass the leaktest Cpil.exe (created by Comodo)
It wasnt Comodo, it was me that f***d up somewhere. This reply from Comodo´s support solved the problem:

-{ Quote: "Hi Sukarof,

Can you check your HKEY_LOCAL_MACHINE\SYSTEM\Software\Comodo\Personal Firewall\AppCtrl\IPC key for entry cpil.exe in case you have accidentally created a rule for cpil.exe?

it should belong to explorer.exe with some rights assigned to cpil.exe, if this is a case.

Thank you,
Egemen" }-
http://www.aimoo.com/forum/images/messageicon/embarrassment.gif

On a side note; I love the fact that Comodo can show exactly which module inside svchost.exe wants access to the net. And it lets me decide if only that module should be blocked or allowed, not blocking the rest of the modules that resides inside svchost which would be the case if I blocked svchost.exe :thumb:
Never seen any another firewall do that (maybe they can?). They have just told me that svchost.exe wants access.

[BlitzenZeus]

This firewall keeps its firewall rules in the registry? That was done in the past with another firewall, and seen as a huge security hole. Basically programs can bypass the xp firewall, and run a server on a machine without the user knowing as long as the change was done on a admin account, many programs did it like MSN Messenger so you know malware can easily do it.

Now if any user, or even just admins since most people don't actually use user accounts, programs can write to these registry keys to insert a rule for themselves, and the user wouldn't be any wiser. However the rules would likely need to be refreshed by the program, so it possibly wouldn't take effect until next boot, which the program could wait for it the registry key was not detected.

Since you guys didn't know much at all about ICS I'm not sure if you can even confim, or deny this possible issue.

[TOMxEU]

Version 2.3 has registry protection. Admin can not import Comodo's settings, if it is activated.

[BlitzenZeus]

-{ Quote: "Version 2.3 has registry protection. It is not posible to import settings, if it is activated." }-
Registry protection.... so a small module just monitoring certain registry keys/trees? I sure hope that they have protection from this module not being shutdown by other processes, and if/when it is shutdown ways to tell if something was imported.

[sukarof]

-{ Quote: "Version 2.3 has registry protection. Admin can not import Comodo's settings, if it is activated." }-

Yup, I noticed that when I tried to delete the rule that gave cpil.exe access to the net. I had to shut down CPF in order to do that. Btw I tried to shut down CPF firewall (cmdagent.exe) with Diamondcs Advances Process Termination v4 but could not do that. A couple of times CPF asked me if I wanted to allow APT to shut down the service and if I said no, it wouldnt terminate.
I tried all 17 different termination methods. Now that is a good protection :isay: :)

[CJsDad]

-{ Quote: "Well mine remembers fine:thumb:
The sequence is just the different components as thequest mentioned and im sure the very low setting fixes this but i cannot explain why you get popups at every startup on same application and theres a simple way to find out.

Check the security window like the image below and make sure you have atleast one program like firefox completely given access as you see in my list each application has atleast 2 or more rules then restart and check that same list and if the rules are still there then im correct about the alerts coming everytime because comodo maybe asking about incoming/ outcoming, udp,tcp and all those other stuffs." }-

Coolio is that an actual screenshot of your firewall?
You dont have any rules setup, all I see is "ANY" for destination and port, kind of a loose setup dont you think?

By the way the popups have stopped, I think have this FW figured out now.
Everyone says its easy to setup but is that because they use the default rules of CPF?
If so then ANY firewall is easy to setup.
I've been creating rules for each and every app that I have, I will NOT allow access to ANY app under the default rules of CPF or any firewall for that matter.

[rdsu]

-{ Quote: "This firewall keeps its firewall rules in the registry?" }-
This is a good concern, and I will try to get better info about this...

Maybe if they have an encrypted file, and load it on the firewall starts should better...

I don't know how the others firewalls handles this...

[Coolio10]

-{ Quote: "Coolio is that an actual screenshot of your firewall?
You dont have any rules setup, all I see is "ANY" for destination and port, kind of a loose setup dont you think?

By the way the popups have stopped, I think have this FW figured out now.
Everyone says its easy to setup but is that because they use the default rules of CPF?
If so then ANY firewall is easy to setup.
I've been creating rules for each and every app that I have, I will NOT allow access to ANY app under the default rules of CPF or any firewall for that matter." }-
Actually it is an actual screenshot and the setup is not loose because you see on the right side it shows incoming/ outcoming, udp,tcp and that stuff that means i get asked if i want it incoming/outgoing udp/tcp but i usually only get 2 popups per app that was changeable as i already explained.

-{ Quote: "Registry protection.... so a small module just monitoring certain registry keys/trees? I sure hope that they have protection from this module not being shutdown by other processes, and if/when it is shutdown ways to tell if something was imported." }-

The registry protection is actually kinda of hard to deactivate unless a virus controls your mouse and knows wht to click. As you can see in the picture you can only activate and deactivate it yourself and i checked task manager for any process related to it and i couldnt find any so that means its part of the cpf.exe process and sukarof just told you he tried 17 different termination programs to shut it down and that wasnt possible so...Next approach is registry but how do you edit comodo through registry when the registry protection is on and you cant shutdown comodo without asking..YOU DONT ::)

Image on left is on very low setting and image in right is very high setting.
Also shown is the registry protection activate/deactivate box.
There alert control goes from:
Very High(Pros ONLY)
High
Medium
Low
Very Low(1 Popup Per App :thumb: )

http://img59.imageshack.us/img59/4513/untitledpo3.th.jpg (http://img59.imageshack.us/my.php?image=untitledpo3.jpg) http://img61.imageshack.us/img61/5883/untitled2xv4.th.jpg (http://img61.imageshack.us/my.php?image=untitled2xv4.jpg)

[Coolio10]

-{ Quote: "Since you guys didn't know much at all about ICS I'm not sure if you can even confim, or deny this possible issue." }-
Ill post at the forum and see if anyone can be of help and post it here for you.

[Rasheed187]

I´m glad they fixed the launchpad issue, you now don´t have to load this stupid app anymore in order to access the main GUI. However, the GUI does not remember it´s screensize, this needs to be fixed. But I will keep my eye on this one, so far no other firewall has been able to replace ZA Pro on my system, so let´s see if Comodo can. :)

[duke1959]

Coolio10, I posted this question in Comodo Forum and am awaiting an answer, but I hope you can answer it here. I have an Outbound Policy Violation in my Logs. (Access Denied, ICMP=Port Unreachable). Protocol is ICMP Outgoing. Source is my IP address on wireless PC. Destination is 68.87.75.194 and sometimes 68.87.764.146. And message is PORT UNREACHABLE. I get an Inbound violation ocassionally too having to do with this. I beleive it has to do with my Router, and is most likely normal. My question is. Should I allow this and if so how do I do that? I know you said to ask you questions in the Comodo Forum, and everyone there is truly helpful, but I want to make sure this is okay as it may take a little more time to get an answer there. I do appreciate it.

[storm119]

-{ Quote: "My question is. Should I allow this and if so how do I do that?" }-

Try this " create a rule ALLOW for ICMP Out " in * Network Monitor * see *SS* below and place the new rule ABOVE the " Block & Log = IP In/Out "

http://img471.imageshack.us/img471/9017/rule1bp8.png (http://imageshack.us)
http://img79.imageshack.us/img79/4788/rule2rk2.png (http://imageshack.us)
http://img372.imageshack.us/img372/838/rule3sn2.png (http://imageshack.us)

FYI i've the same info's from my log, creating rule as above solved it ...

HTH

[duke1959]

Okay thanks storm119 I think I can handle this, but do I just click +add and then change what is already written in the Network Control Rule window that pops up to what you told me?

[lookcity]

I have installed comodo.

It's so good. It is so strongly in anti leak.

I like it except the lanchpad.;D

[duke1959]

lookcity, you can set Launchpad not to load on start up. Right click on LaunchPad click on options and uncheck the two squares. There is much better instructions on how to do this in the Comodo Forums, than what i am telling you. This is all I can remember since doing it on Friday from the instructions I found there. Just saw instructions on how to do this right here in this Forum under New Comodo firewall release.

[storm119]

-{ Quote: "but do I just click +add and then change what is already written in the Network Control Rule window that pops up to what you told me?" }-
Yup! ;)

For more specific go to --> Main Window --> Security --> Network Monitor --> (in right pane = Network Control Rules) right click --> Add Rule --> Add --> Window pop-up --> Configure the new rule as mentioned above and place the new created rule above the " Block & Log = IP In/Out " ... your're done :)

Good luck, mate ;)

[Devil's Advocate]

Well here's the one thing I don't like about Comodo Personal Firewall.

When a prompt occurs, you only have a choice of creating rule, but you can't edit the rule created. Oh sure you can then go into application monitor and change it, but that's just double work.

I figured out how to control the type of rule auto created (via the alert frequency slider) but it's not sufficient.

Sometimes I want a broad rule covering both ip address and ports, other times I just want ports, yet other times i want the rule to be ip specifc only. Comodo firewall just doesn't give me the flexibility to change the rule as I need, not without doing a lot of double work.

[duke1959]

Just did it this morning storm119. I'll let you know how it's working, but I'm sure it will be fine. Thanks very much for your help. Did this have something to do with my PC talking to Router?

[CJsDad]

-{ Quote: "Well here's the one thing I don't like about Comodo Personal Firewall.

When a prompt occurs, you only have a choice of creating rule, but you can't edit the rule created. Oh sure you can then go into application monitor and change it, but that's just double work.

I figured out how to control the type of rule auto created (via the alert frequency slider) but it's not sufficient.

Sometimes I want a broad rule covering both ip address and ports, other times I just want ports, yet other times i want the rule to be ip specifc only. Comodo firewall just doesn't give me the flexibility to change the rule as I need, not without doing a lot of double work." }-


Same problem here, seems that you are somewhat limited in creating rules.
Some people leave their rules in the Application Monitor's Destination IP and Destination Ports as "ANY" but I dont like that idea.

[Devil's Advocate]

-{ Quote: "Same problem here, seems that you are somewhat limited in creating rules.
Some people leave their rules in the Application Monitor's Destination IP and Destination Ports as "ANY" but I dont like that idea." }-

Well you can go the other way, and set the alert frequency to the highest level, then the rules created will be specific ip,port and protocol, but watch out if you just installed a new browser.....

[Coolio10]

-{ Quote: "Well here's the one thing I don't like about Comodo Personal Firewall.

When a prompt occurs, you only have a choice of creating rule, but you can't edit the rule created. Oh sure you can then go into application monitor and change it, but that's just double work.

I figured out how to control the type of rule auto created (via the alert frequency slider) but it's not sufficient.

Sometimes I want a broad rule covering both ip address and ports, other times I just want ports, yet other times i want the rule to be ip specifc only. Comodo firewall just doesn't give me the flexibility to change the rule as I need, not without doing a lot of double work." }-
So you mean youd rather it let you choose if it asks at every alert that its changeable? If that then im sure that will be in the neext release or not i could put it in the wishlist. CJ now its not lose but i get 12 different alerts id say if you were actually using comodo medium would be right for you.

[Devil's Advocate]

-{ Quote: "So you mean youd rather it let you choose if it asks at every alert that its changeable? " }-

Not sure what you are saying, but surely you have used firewalls other than comodo?

When you are prompted, typically you can accept the rules created, or you can edit it to your liking before accepting. That's all I'm asking for.

Just look at how sygate, kerio,jetico etc etc do it.

[rdsu]

-{ Quote: "Well here's the one thing I don't like about Comodo Personal Firewall.

When a prompt occurs, you only have a choice of creating rule, but you can't edit the rule created. Oh sure you can then go into application monitor and change it, but that's just double work.

I figured out how to control the type of rule auto created (via the alert frequency slider) but it's not sufficient.

Sometimes I want a broad rule covering both ip address and ports, other times I just want ports, yet other times i want the rule to be ip specifc only. Comodo firewall just doesn't give me the flexibility to change the rule as I need, not without doing a lot of double work." }-
You suggest that here: CPF Wishlist Rev 3 (http://forums.comodo.com/index.php/topic,1202.0.html) ;)

[duke1959]

Hey everyone. I just posted this in the Comodo Forum. I noticed that when I log completely off one account and click to log on mine. After it comes up the Security Center Icon is system tray for a split second and then goes away, but the Comodo Icon is there the whole time. It doesn't happen with a restart or when switching from one account to the other. (I only have two) It is just when I completely lgo off the one. I believe it says my Firewall isn't there, and not my Anivirus because I didn't notice this happening with only using AOL AVS and Windows XP Firewall a fewdays ago. I could be wrong, but the Windows Security Icon goes away so fastI can't read what the pop up says. Take care I'll check back later to se if anyone else experienced this.

[speedlever]

I disabled the security center so I wouldn't see it on my system(s) anyway.

I just installed Comodo on a couple of my systems and with a minor tweak or two, Comodo seems to be running fine. I added a trusted zone for my LAN and set up a couple of network control rules based on information gleaned from a FAQ on the Comodo forums.

I've had trouble with ZAF in some recent installs killing my network and printer sharing and thought it was time to try something else (other than the Windows firewall).

Initially, Comodo killed my network sharing, but the tweaks mentioned above readily fixed that issue.

[cprtech]

-{ Quote: "Not sure what you are saying, but surely you have used firewalls other than comodo?

When you are prompted, typically you can accept the rules created, or you can edit it to your liking before accepting. That's all I'm asking for.

Just look at how sygate, kerio,jetico etc etc do it." }-

I understand exactly what you are saying Devil's Advocate. It is the same beef I have with rules creation on the fly with Comodo. It is just too cumbersome as compared with Outpost Pro. With OP I can easily set the port and/or ip range parameters when I am first creating the rule after being prompted on it. With Comodo, it is necessary to go in after the fact to set this up.

That said, I am still extremely impressed with Comodo. After all, once the rules for all necessary apps are eventually fine-tuned to my liking, there is little more I need to do. My goodness, Comodo has developed a first-rate security app here and they are offering it free of charge! All it really needs is some improvement in rules creation, logging and a better way to save the rules configuration, and it will be as close to perfect as one can expect. I feel that Agnitum has done an excellent job with Outpost regarding these three parameters, but Comodo's overall security blanket on the system is the best I have seen since I trialed Tiny pfw a while ago.

My two thumbs up to Comodo :)

[sukarof]

-{ Quote: "Hey everyone. I just posted this in the Comodo Forum. I noticed that when I log completely off one account and click to log on mine. After it comes up the Security Center Icon is system tray for a split second and then goes away, but the Comodo Icon is there the whole time. It doesn't happen with a restart or when switching from one account to the other. (I only have two) It is just when I completely lgo off the one. I believe it says my Firewall isn't there, and not my Anivirus because I didn't notice this happening with only using AOL AVS and Windows XP Firewall a fewdays ago. I could be wrong, but the Windows Security Icon goes away so fastI can't read what the pop up says. Take care I'll check back later to se if anyone else experienced this." }-

That happend to me tonight when I booted up to my main snapshot, but the warning from security center wouldnt go away even though Comodo was up and running. I tested at grc.com and started a couple of applications that did not have any rules to make sure Comodo was working alright. That have not happend before..strange, but who needs security center anyway so I disabled it.

[duke1959]

I just got another Application Access Denied. This one is (System 0.0.0.0 nbsess(139). Application is, System. Parent is, System. Protocol is, TCP In. And Destination is, 0.0.0.0 nbsess 139. Everything running okay, just not sure what this is. It didn't happen until I changed the other Application Access Denied I posted about earlier, but this may not be the reason. Thanks ahead of time to anyone who lets me know what this one is.

[CJsDad]

The ONLY problem I have with Comodo is the rules creation and saving the rules.
I'm still having trouble saving the rules after I log off and log back on, I'm still getting repeated popups for a program I juts finished creating rules for.

Another thing that wouldn't be so bad is if someone from the Comodo forums could come up with a secure configuration step by step the way Paranoid2000 has done with OutPost Pro on the Agnitum forum.
I see that Stem has already started a thread somewhat the same way.

It seems there are ALOT of questions for a firewall that everyone says is so easy to setup and configure but you could be there for days trying to read everything about Comodo.

[cprtech]

-{ Quote: "
I'm still having trouble saving the rules after I log off and log back on, I'm still getting repeated popups for a program I juts finished creating rules for.
" }-

Initially I thought the same thing, but upon closer inspection if you look very carefully, you may see two or more rules that look exactly the same but then realize that the parent path leads to different parent processes. This is most likely the case if you are using "Very High" for the Alert level. For example, I have no less than four rules for firefox.exe where the direction is in, protocol is tcp, and the destination ip is 127.0.0.1. However, where they all differ is in the parent path where the parent application is different in all cases.

[cprtech]

-{ Quote: "I just got another Application Access Denied. This one is (System 0.0.0.0 nbsess(139). Application is, System. Parent is, System. Protocol is, TCP In. And Destination is, 0.0.0.0 nbsess 139. Everything running okay, just not sure what this is. It didn't happen until I changed the other Application Access Denied I posted about earlier, but this may not be the reason. Thanks ahead of time to anyone who lets me know what this one is." }-

Go to: Activity->logs and check for any denied connections, looking for the reason why the block occured. It may be a Network Control rule or Application Monitor rule not yet created. Port 139 is NetBIOS so you may need a global-type rule created for it.

[CJsDad]

-{ Quote: "Initially I thought the same thing, but upon closer inspection if you look very carefully, you may see two or more rules that look exactly the same but then realize that the parent path leads to different parent processes. This is most likely the case if you are using "Very High" for the Alert level. For example, I have no less than four rules for firefox.exe where the direction is in, protocol is tcp, and the destination ip is 127.0.0.1. However, where they all differ is in the parent path where the parent application is different in all cases." }-

My rules are gone.

Some rules stay in place for certain apps but others will disappear for no reason like I never created the rule in the first place.

The other scenario, my rule creation will disappear however the program that I created the rule for will still be there, just no rule in place, it will just show "ANY"
for the destination and port rules and TCP/UDP Out for the protocol

[duke1959]

Thanks, but do I need NetBIOS for anything?

[cprtech]

-{ Quote: "Thanks, but do I need NetBIOS for anything?" }-

Not if your machine is on its own, and you aren't sharing files on it.

[cprtech]

-{ Quote: "My rules are gone.

Some rules stay in place for certain apps but others will disappear for no reason like I never created the rule in the first place.

The other scenario, my rule creation will disappear however the program that I created the rule for will still be there, just no rule in place, it will just show "ANY"
for the destination and port rules and TCP/UDP Out for the protocol" }-

Well, I don't know what to say about that. I presume you are using ver 2.3.4.45? I'm still a rookie with this fw, using it since only yesterday morning. The rules are stored in the registry, so I wonder if you might have some sort of registry protection app that is not allowing rules to be written to it? It is only a theory. Do you know of anyone else encountering this problem?

Also, what is your "Alert frequency level" set at under: Security->Advanced->Miscellaneous->Configure ?

[CJsDad]

-{ Quote: "Well, I don't know what to say about that. I presume you are using ver 2.3.4.45? I'm still a rookie with this fw, using it since only yesterday morning. The rules are stored in the registry, so I wonder if you might have some sort of registry protection app that is not allowing rules to be written to it? It is only a theory. Do you know of anyone else encountering this problem?

Also, what is your "Alert frequency level" set at under: Security->Advanced->Miscellaneous->Configure ?" }-


I'm using the latest verion of CPF.
My Alert fequency level is set to Low which I guess is the default setting?
I now have moved it up one level to medium.
I uninstalled and did a clean reinstall, making sure to clear the registry of any remaining parts of CPF
I think this may have done the trick because when I logged back on the rules I created were still there.

[cprtech]

-{ Quote: "I'm using the latest verion of CPF.
My Alert fequency level is set to Low which I guess is the default setting?
I now have moved it up one level to medium.
I uninstalled and did a clean reinstall, making sure to clear the registry of any remaining parts of CPF
I think this may have done the trick because when I logged back on the rules I created were still there." }-

That's good news :) Hopefully the rules stay put for you. I wonder if the low Alert frequency level is the cause of rules not being saved, because it is displaying only one alert per application?

[duke1959]

cprtech, my PC is a wireless desktop, and my son is hard wired into the router, but we don't share files that i know of. So I guess just leave the Application Access Denied as is right? And thanks so far for your help, I appreciate it. I did look up NetBIOS on the internet, and with your help understand it better now.

[cprtech]

-{ Quote: "cprtech, my PC is a wireless desktop, and my son is hard wired into the router, but we don't share files that i know of. So I guess just leave the Application Access Denied as is right? And thanks so far for your help, I appreciate it. I did look up NetBIOS on the internet, and with your help understand it better now." }-

No problems helping out where and when I can. You can safely disable NetBIOS as shown here: http://www.petri.co.il/disable_netbios_in_w2k_xp_2003.htm

It is a good idea if you don't need it, as it takes away one avenue of attack by some malware.

[duke1959]

cprtech thanks I got it. Being on a wireless DeskTop, I imagine my DHCP Server is the Router so I don't have to change anything there correct?

[duke1959]

Whoops somehow I doubled up on that last post. So I'll edit this one to say thanks again

[cprtech]

-{ Quote: "Okay cprtech I got it. This is a Wireless PC, but I shouldn't have to change anything in the Router which I believe is my DHCP Server correct?" }-

Yes, that is correct. It will probably be something like 192.168.0.1 or 192.168.1.1 or similar, depending on the router make/model.

[duke1959]

All right then cprtech, I will give you a shout if i need anymore help if that's ok. Also isn't there a new vesrsion of CPF coming out today with fixes that some people need?

[cprtech]

-{ Quote: " Also isn't there a new vesrsion of CPF coming out today with fixes that some people need?" }-

Just checked the forum and it is delayed 'til Sept. 7

[duke1959]

Yeah I just read that in their forums where I saw your user name as well. My CPF is working fine except when I log completely off one account and then go to mine which is already logged on, I see the Security Center Icon in System Tray and very briefly see an alert before it goes away. I'm certain it is telling me my Firewall isn't there, but it goes away so fast I can't say for sure. Is this anything that you have heard about? Maybe the new version will fix it? Take care.

[cprtech]

-{ Quote: "Yeah I just read that in their forums where I saw your user name as well. My CPF is working fine except when I log completely off one account and then go to mine which is already logged on, I see the Security Center Icon in System Tray and very briefly see an alert before it goes away. I'm certain it is telling me my Firewall isn't there, but it goes away so fast I can't say for sure. Is this anything that you have heard about? Maybe the new version will fix it? Take care." }-

Not sure what that is. I believe the latest version addresses fast user switching (FUS) but I don't use it so I don't know.

[pcalvert]

-{ Quote: "This firewall keeps its firewall rules in the registry? That was done in the past with another firewall, and seen as a huge security hole.
" }-

Uggh, what a terrible idea. Why couldn't they have done something more sensible, like the put the firewall rules in a special config file? They could even encrypt it for better security.

I was hoping to use Comodo, but this "feature" is a killer for me. I use software that protects the entire system partition from being modified (Shadow Surfer), so any new firewall rules will be deleted when I reboot.

Phil

[cprtech]

-{ Quote: "Uggh, what a terrible idea. Why couldn't they have done something more sensible, like the put the firewall rules in a special config file? They could even encrypt it for better security.

I was hoping to use Comodo, but this "feature" is a killer for me. I use software that protects the entire system partition from being modified (Shadow Surfer), so any new firewall rules will be deleted when I reboot.

Phil" }-

It is supposed to be on the "to-do" list for Comodo. Currently, however, it does protect its own registry keys. Please see ss.

[noodles12]

I just started using it and I'm having troubel directly connecting to another user using AIM. I have it to allow all udp/tcp packets for aim and all the ports but it still won't let me connect to other users. If i don't find out how to fix this i'd go back to kerio 2.1.5 because it does everything i need and is very Very light.

[duke1959]

I just uninstalled the last version of Comodo Firewall and I have to say the old quickness in my PC when I switch from one account to the other is back. Hopefully when I install the new release that is coming out on Friday this won't be the case. I hate to admit this since Comodo passes all the leak tests and I absolutely love the Firewall, but ZA Free which only passes 2 LT didn't slow down my PC in this nature. I understand the extra protection provided by Comodo is great, and the memory wasn't that high on my PC (10-15MB in Task Manager) However I liked the speed I had on my PC with ZA Free and the AOL AVS that I still use. I know there is no comparison between the two, and ZA has had it's share of problems, but ProcessGuard Free, ZA Free, and either AVS or Antivir may be a better alternative for the quickness and protection I'm looking for. Not giving up on Comodo, I know it will keep improving. I'm just thinking about this set up for the time being. Friday may well make me forget all about doing this though I hope.

[TOMxEU]

You can disable some extra protection to gain performance (Aplication & Component Monitor).

[cprtech]

-{ Quote: "I just started using it and I'm having troubel directly connecting to another user using AIM. I have it to allow all udp/tcp packets for aim and all the ports but it still won't let me connect to other users. If i don't find out how to fix this i'd go back to kerio 2.1.5 because it does everything i need and is very Very light." }-

Always check the logs when you encounter connection issues like this. There may be some sort of Network or Application Policy error. This will invariably give you the reason for the issue and what needs to be done to fix it. these types of connection problems can occur if there isn't the necessary parameters already in place in the Network Monitor list. But do check the logs and look for Medium-High severity level entries.

[djg05]

-{ Quote: "However I liked the speed I had on my PC with ZA Free and the AOL AVS that I still use. I know there is no comparison between the two, and ZA has had it's share of problems, but ProcessGuard Free, ZA Free, and either AVS or Antivir may be a better alternative for the quickness and protection I'm looking for. Not giving up on Comodo, I know it will keep improving. I'm just thinking about this set up for the time being. Friday may well make me forget all about doing this though I hope." }-

I noticed the speed improvement when I went back to Kerio. I run other apps and although Kerio 2 is not the best, with the other layers I seems to prevent most leak tests and blocking IE deals with the rest.

[TOMxEU]

When "Enable Alerts" is disabled (unchecked), it will also speed up PC a little (noticable).
Comodo will not ask, it will just allow everything according to the rules and block the rest.

[aigle]

-{ Quote: "Uggh, what a terrible idea. Why couldn't they have done something more sensible, like the put the firewall rules in a special config file? They could even encrypt it for better security.

I was hoping to use Comodo, but this "feature" is a killer for me. I use software that protects the entire system partition from being modified (Shadow Surfer), so any new firewall rules will be deleted when I reboot.

Phil" }-
As I know saving the config file will be available soon.

[Melih-Comodo]

-{ Quote: "I just uninstalled the last version of Comodo Firewall and I have to say the old quickness in my PC when I switch from one account to the other is back. Hopefully when I install the new release that is coming out on Friday this won't be the case. I hate to admit this since Comodo passes all the leak tests and I absolutely love the Firewall, but ZA Free which only passes 2 LT didn't slow down my PC in this nature. I understand the extra protection provided by Comodo is great, and the memory wasn't that high on my PC (10-15MB in Task Manager) However I liked the speed I had on my PC with ZA Free and the AOL AVS that I still use. I know there is no comparison between the two, and ZA has had it's share of problems, but ProcessGuard Free, ZA Free, and either AVS or Antivir may be a better alternative for the quickness and protection I'm looking for. Not giving up on Comodo, I know it will keep improving. I'm just thinking about this set up for the time being. Friday may well make me forget all about doing this though I hope." }-

latest version of CPF is designed to be much (MUCH) faster than the last version. hopefully you will notice and like the difference.

thanks
melih

[speedlever]

I find myself wondering what hardware those of you have with the speed issues. And how are you determining that Comodo is causing the loss of speed?

I run Comodo on a middle of the road laptop with a 1.6 GHz Pentium M CPU and 1 Gig of ram. I haven't noticed any speed issues with normal browsing and email activities. At least, I've seen nothing to raise a question in my mind about speed issues.

Also, I don't find Comodo particularly light on the resources. I've installed it on 3 different computers and find it typically runs in the 60,000+k range for virtual memory usage.

[Melih-Comodo]

-{ Quote: "I find myself wondering what hardware those of you have with the speed issues. And how are you determining that Comodo is causing the loss of speed?

I run Comodo on a middle of the road laptop with a 1.6 GHz Pentium M CPU and 1 Gig of ram. I haven't noticed any speed issues with normal browsing and email activities. At least, I've seen nothing to raise a question in my mind about speed issues.

Also, I don't find Comodo particularly light on the resources. I've installed it on 3 different computers and find it typically runs in the 60,000+k range for virtual memory usage." }-

hmm. strange..
can you pls try the latest version. The mem usage should be less than 25meg.

thanks
Melih

[speedlever]

I just d/l this week. Using version 2.3.4.45. Is there a later version than this? Updater says it's the latest.

Remember that the number I posted is the virtual size as reported by process explorer.

See the attached image.

[cprtech]

-{ Quote: "I just d/l this week. Using version 2.3.4.45. Is there a later version than this? Updater says it's the latest.

Remember that the number I posted is the virtual size as reported by process explorer.
" }-

Try Working Set Size. That represents physical memory used. It should be around 25,000 K.

You have the latest version but there should be one released tomorrow.

[speedlever]

Interesting. I thought PE virtual size was the same thing as TM virtual memory. Guess not.

Check this attachment for more confusement. I'll post a pic of my TM in the next post for comparison.

[speedlever]

Here's TM showing memory usage and VM size. I don't know how to relate the different numbers seen in TM and PE.

[cprtech]

That looks more like it, but funny I don't see cmdagent (Comodo application agent) in your PE screenshot. It does show in your Task Mgr ss.

I've attached mine as well. The two Comodo processes combined are a typical 25 Mb.

I see you also have an unusual high number of processes running. I guess if your pc isn't wilting under the pressure, there is nothing wrong with having so many.

[speedlever]

You didn't see it because I didn't have winlogon.exe and services.exe expanded.

As to the number of processes, hmmm... it's just what runs for me. I probably should clean it up some day.... or not!

I typically have PE, Windows Explorer, Thunderbird and multiple instances of Firefox open as well as a systray full of stuff.

[duke1959]

Melih, are you referring to the new version that is due out on Friday, when you say latest version will be much (Much) faster? It was 2.3.4.45 that I uninstalled to see if switching from one user to another solved the delay in that account coming up, and unfortunately it has. I am not trying to be too fussy here, but it can be a burden when the other user is your wife and she complains about how long it takes to get on her account, especially when she knows you just added something new to the PC. (LOL) No divorce in the making here, but a new faster version of CPF would help restore the marital bliss that once was, if I could use Comodo with no slow down for either of us. (LOL)

[speedlever]

Ahh. FUS. I do not use that on my laptop. I run the KIS 6 suite on my main PC and use the Kaspersky firewall there too. No problems with FUS on KIS6.0.

[Clweb]

The real memory usage (RAM) of a process is given by the "Private bytes" column.
The virtual size of the process explorer is indeed very different from that given by the Windows task manager.

[TOMxEU]

Acording to this (http://www.cygwin.com/ml/cygwin/2005-06/msg00585.html) (TweakHund (http://www.tweakhound.com/xp/virtualmemory.htm) and Wiki (http://en.wikipedia.org/wiki/Virtual_memory) about VM) and based on screen (http://img181.imageshack.us/img181/8751/capture09072006091828ge8.jpg), it fits:

taskman's "Mem usage" column == procexp's "Working set" column and this is the amount of memory that is actually being used by the process.

taskman's "VM size" column == procexp's "Private bytes" column and this is the total amount of code+data that has been assigned to the process, though not all of it is necessarily in use.

procexp's "virtual size" is simply a representation of the amount of
virutal memory that has been allocated to the process.

[ubuntu]

Hi speedlever

according to your pics , Comodo TaskMan "Mem Usage" = 6344K+8044K < 15M
It's Ok

[Coolio10]

Mines about 16MB And im using avast with it and no slow down!

As soon as i posted this the cpf processes went down to 3mb???

[Jarmo P]

If I remember from last week when I tried that comodo but was not happy with the primitive level of making rules, there were 2 files starting with letter c. 3 when that lauch center was running. But those 2 files did take 24 to 25 MB's.
Maybe you have posted enough here coolio as a fanboy of this thing?

Cannot trust a firewall that stores rules in registry and allows them not to be saved. Primitive logging features.
Only good thing that can be said is that it (maybe) is good with stupid leaktests.

[cprtech]

-{ Quote: "
It is just so unbelievable, that such a great firewall, better than some paid, is free." }-

Tom, I feel the same way. No fanatacizm here either. I'm a registered user of Outpost for nearly two years. It is an awesome firewall in its own regard, and I have always thought of it as being the best, for me, available pc fw I have ever used. I just wanted to try Comodo because of the hype it has been getting from some in this forum. Approaching my testing of it from a very unbiased point of view, I have been astounded at what I have seen from it. It is truly a first rate firewall and, IMHO, gives Outpost a run for its money.

[DaveD]

After reading all 6 pages of this thread I decided to install Comodo for the first time. I have plenty of knowledge of software firewalls and this one is a piece of crap and I cannot believe I have wasted my time with this.

- It has completely disabled AntiVir's Guard and greyed out the option to start it

- It has 2 system tray icons which have essentially the same options in each (I am curious to know why they have done this, as opposed to just having 1 system tray icon)

- After a default install I was able to go crazy with Firefox, Thunderbird, and a few other programs with NO pop ups asking for permission to access the Internet. Security level is on custom, all default options. You would think they would offer some security out-of-the-box.

- The GUI is damn ugly and does not fit in with the rest of the operating system and programs

Upon submitting this port, I will be removing this program and visiting the Comodo site to see if they have a removal tool to ensure it is completely gone and will return to using just a well secured, well configured NAT router with SPI. I am honestly mad that I even tried this program. Hopefully AntiVir's Guard will work once this is gone.

[TOMxEU]

-{ Quote: "- It has completely disabled AntiVir's Guard and greyed out the option to start it." }-
Some aplications (ATI CCC) need internet access in order to run.
Although it is interesting, that it did not ask for any aplication rule.
-{ Quote: "- After a default install I was able to go crazy with Firefox." }-
As far as I know, FF needs TCP loopback rule, but Comodo should ask for it.
-{ Quote: "- It has 2 system tray icons which have essentially the same options in each." }-
Comodo has more products than just a firewall, if someone use more of them, it can be usefull, but if just one aplication is used, it just wasted 5 MB. Download this REG (http://www.sendspace.com/file/nx7e3p), run and restart.
-{ Quote: "- The GUI is damn ugly and does not fit in with the rest of the operating system and programs." }-
It is not possible to make all users happy. In fact I did not like the GUI neither, when I installed it first time, because I was acustomed to Outpost's GUI, but I get used to it in and I like it.

[duke1959]

Wow! DaveD. The only problem I experienced using version 2.3.4.45 was only that it slowed down my PC a slight bit when switching from one account to the other. As a matter of fact, although there are problems with this release that are posted in their Forums, none of them seem to be at the level of which you speak. Personally I like Comodo as I have tried and had my share of problems with SKPF and ZA Free, and am simply waiting for the next release of Comodo due out I believe today or next week that should take care of my particular problem. This however is my point. SKPF is still having problems with their Firewall as is ZA, and unlike what I have read about some of those problems, I can assure you that Comodo takes much pride in solving any problems that people are having with their Firewall as quickly as possible. As for the GUI of Comodo, that was one of the best things about it for me. It was laid out in an order that I thought was fairly easy to understand, and even when I did have a few questions about some alerts I received in my logs, the users here and in their Forum were quick to help me. I'm not saying your wrong in the way you feel about your problems, or attacking you. It's just that I am surprised at the level of problems you had with the Comodo Firewall and with the level of your anger about it. Take care now.

[speedlever]

First Comodo problem reared its head today. I chose to exit the FW via rt click on the systray icon and I enabled the XP firewall to see if I had a Comodo firewall problem with an app that wasn't working.

When I rebooted the computer, I got 3 pop-ups from Comodo telling me the App Monitor, the Component Monitor and the App behavior analysis were not working and that reinstalling the program may fix the issue.

A quick scan of the Comodo forums did not reveal any info about this. When I go to the App Monitor page and try to turn on the feature, the button won't select. Same for the other disabled functions.

More reboots don't fix the Comodo problem.

Anyone seen this?

Edit: I uninstalled/reinstalled Comodo. Upon installation, I got a msg about an update available. I updated.. the new version was the same..2.3.4.45. Restarted and got another update msg and this time got 2.3.5.62.

[Coolio10]

-{ Quote: "I would like to announce the availability of CF 2.3.5.62 at
http://www.personalfirewall.comodo.com/download/CF_Setup_2.3.5.62.exe

What's New?
-------------------------------------------------------
FIXED! Bug causing slow windows startups
FIXED! Bugs causing BSODs
FIXED! Bugs causing GUI to crash
FIXED! Bug causing windows startup to freeze when block all outgoing connections option selected
FIXED! Bug causing some alerts to be invisible

Enjoy,
Egemen" }-
This version fixes the problems with the people that kept saying some programs had no alerts or had slow startup.

[aigle]

Anybody installed it so far?

[sukarof]

-{ Quote: "Anybody installed it so far?" }-
I have. I let comodo update itself. No problems.

[rdsu]

Working here very well... :)

[Green Dragon]

-{ Quote: "Working here very well... :)" }-

me too

[mvdu]

It's making my PC too noisy. Going back to Outpost.

[mercurie]

All,
Just updated. All is running just fine not a single problem. I like the way it tells you exactly what it is doing, when and what to expect next. Fully automatic if you allow it when it asks. This firewall is ideal for a newbie imho. :thumb:

[CJsDad]

I updated to the latest version but now I'm back to the same problems as before.
I did a clean reinstall of CPF, I didnt update it through the updater option of CPF.

So now what happens?

1) No alerts to programs starting up when I log on.
This is all BEFORE any rules have been created or any programs have been allowed access.

2) When I create rules for programs I get asked if I would like to allow those same programs a few minutes later

I've never had this problem with OutPost Pro or even something as old but still trust worthy like Kerio 2.1.5.

My AV, NOD32 was allowed to start automatically with no alerts, I even clicked on the update button of NOD32 and nothing, not a peep from CPF, same goes for a couple of other programs.

[CJsDad]

Well I got the first problem solved.
Some of the programs that CPF was not alerting me to are considered safe by Comodo.
A simple task of unchecking the box for "Do not show any alerts for the aplications certified by Comodo"
I think this is a bad idea, I don't know about anyone else but I would like to know what program wants an outbound connection regardless of what Comodo thinks.
While this may make things easier with less popups for some people, it can still be somewhat frustrating to others.

[ronjor]

-{ Quote: "I think this is a bad idea," }-
I agree.

[Joliet Jake]

-{ Quote: "Well I got the first problem solved.
Some of the programs that CPF was not alerting me to are considered safe by Comodo.
A simple task of unchecking the box for "Do not show any alerts for the aplications certified by Comodo"
I think this is a bad idea, I don't know about anyone else but I would like to know what program wants an outbound connection regardless of what Comodo thinks.
While this may make things easier with less popups for some people, it can still be somewhat frustrating to others." }-


Perhaps this is a lesson for you, and all the others, that you should do a little research on the product you are installing before you install it? If you did a little research, which for a security product as important as a firewall is surely a must, then you'd have all the knowledge you needed before you started. All the information is available at Comodo's forums and anything you were unsure about would have been answered if you'd asked.
It amazes me the amount of people who stick software on their PC then try to find out what it does and what it doesn't do.
Forewarned is forearmed.

[CJsDad]

-{ Quote: "Perhaps this is a lesson for you, and all the others, that you should do a little research on the product you are installing before you install it? If you did a little research, which for a security product as important as a firewall is surely a must, then you'd have all the knowledge you needed before you started. All the information is available at Comodo's forums and anything you were unsure about would have been answered if you'd asked.
It amazes me the amount of people who stick software on their PC then try to find out what it does and what it doesn't do.
Forewarned is forearmed." }-



I already found out what the problem was without the need of the forum and I still think its a stupid idea.
I guess alot of people need to do the research then since this question has been brought up quite a few times.
Just because Comodo wants to do things differently doesnt mean I do not know what i'm doing with a firewall.
Any other firewall I've had on my PC alerted me to any outgoing connection regardless of what the program is
Since when did a firewall ever decide which program was certified to run on a PC without that persons decision?
So big deal I didnt see the part about unchecking the box, everyone makes mistakes regardless of how much RESEARCH they do.

Anyway how are you supposed to go to a forum if you're unsure about something and ask questions about their program unless you download it and run it on your PC first?
If I never downloaded CPF and went to their forums, some of the things I read that are posted over there wouldn't make any sense at all to me.

[rdsu]

The objective of Comodo Team is to provide a firewall that the user just install it and forget it as much possible...

For a user without knowledge and only want to be protected, this is a very good solution because avoid a lot of annoying alerts...
But for users that what to know everything didn't like this feature...

You can change this feature while installing it... ;)

[cprtech]

-{ Quote: "
It amazes me the amount of people who stick software on their PC then try to find out what it does and what it doesn't do.
" }-

Hands-on experience is the best way to find out what software does and what it doesn't do. More specifically, how it performs and how it doesn't perform as advertised. You can read through forums, books and manuals all you want, but it is necessary to actually use the product. The forums are a good place to get a general idea of how well a product is performing for people. If the general consensus is positive, then it is usually not a bad idea to take the plunge and trial the product if it interests you.

[TOMxEU]

-{ Quote: "2) When I create rules for programs I get asked if I would like to allow those same programs a few minutes later." }-
In Outpost, when a DLL change, you have to update it by click on OK due to CC.

Comodo has Component Control as well as Outpost, but it has also Aplication Behaviour Control, which cause many popups, because it provides a better control, but you can allways disable it.

I disabled it as well as Alerts & I have no popups. You can set up any soft the way you like it.

[Joliet Jake]

-{ Quote: "Hands-on experience is the best way to find out what software does and what it doesn't do. More specifically, how it performs and how it doesn't perform as advertised. You can read through forums, books and manuals all you want, but it is necessary to actually use the product. The forums are a good place to get a general idea of how well a product is performing for people. If the general consensus is positive, then it is usually not a bad idea to take the plunge and trial the product if it interests you." }-

That is true to a point. How software reacts to individual set ups can vary, but what the guy was complaining about was a feature of Comodo, not some unknown quantity.

[Joliet Jake]

-{ Quote: "I already found out what the problem was without the need of the forum and I still think its a stupid idea.
I guess alot of people need to do the research then since this question has been brought up quite a few times.
Just because Comodo wants to do things differently doesnt mean I do not know what i'm doing with a firewall.
Any other firewall I've had on my PC alerted me to any outgoing connection regardless of what the program is
Since when did a firewall ever decide which program was certified to run on a PC without that persons decision?
So big deal I didnt see the part about unchecking the box, everyone makes mistakes regardless of how much RESEARCH they do.

Anyway how are you supposed to go to a forum if you're unsure about something and ask questions about their program unless you download it and run it on your PC first?
If I never downloaded CPF and went to their forums, some of the things I read that are posted over there wouldn't make any sense at all to me." }-


A quick search of this very forum would have given you the solution to your problem...:D

http://www.wilderssecurity.com/showthread.php?t=145704

[CJsDad]

I already found the solution to the problem without the need of a quick search, move on with the discussion.

[CJsDad]

-{ Quote: "That is true to a point. How software reacts to individual set ups can vary, but what the guy was complaining about was a feature of Comodo, not some unknown quantity." }-

Again, how are you supposed to know about features and how they act on your PC unless you are actually running the program?
Back to what I had posted earlier, some things you read about will not make sense unless you are using the program.
Reading about it, doing research about it is only half the battle.
Instead of this turning into a "research" thread lets move on, I've already went back to OutPost Pro anyway.

[Joliet Jake]

-{ Quote: "Again, how are you supposed to know about features and how they act on your PC unless you are actually running the program?
Back to what I had posted earlier, some things you read about will not make sense unless you are using the program.
Reading about it, doing research about it is only half the battle.
Instead of this turning into a "research" thread lets move on, I've already went back to OutPost Pro anyway." }-

OK, have fun.

[translien]

-{ Quote: "The new version doesn't use 40MB of memory. The two processes (cpf and cmdagent) combined use 23MB on my system." }-

I have the last version 2.3.5.62 :thumb: and it uses memory usage 10624K and virtual size 17144K. ;D I have it set at medium level.

No problem to automatic install, old XPpro and Windows 2000 SP1 computer.

[translien]

-{ Quote: "The objective of Comodo Team is to provide a firewall that the user just install it and forget it as much possible..." }-


Exactly! I can't understand all these TCP, UDP etc. I just want a firewall, not to learn a whole chapter of IT.

I installed it automatically, put the level at medium, and run three firewalls tests on-line, it passed all three with excellence. It's good enough for me.

[duke1959]

Is it still better to have the CPF Alert Frequency Level set on medium rather than low, even for the average user who surf's safely? Thanks.

[test4]

-{ Quote: "Exactly! I can't understand all these TCP, UDP etc. I just want a firewall, not to learn a whole chapter of IT.

I installed it automatically, put the level at medium, and run three firewalls tests on-line, it passed all three with excellence. It's good enough for me." }-


I couldn't agree more. A good firewall (=with good protection) without being overly complicated, if you choose it to be. That's my kind of thing. :-*

And the fact that it is completely free, unlike many competitors, makes it even better. ;D

[aigle]

-{ Quote: "
I installed it automatically, put the level at medium" }-

What do u mean by medium level? Do u mean to say custom?

[cprtech]

-{ Quote: "What do u mean by medium level? Do u mean to say custom?" }-

See the screenshot.

[aigle]

Thanks, mine was at low and I adjusted it to medium now.

[rdsu]

Read this topic and choose the best for you: Poll: Alert Frequency Level (http://forums.comodo.com/index.php/topic,2209.0.html) ;)

[aigle]

-{ Quote: "Read this topic and choose the best for you: Poll: Alert Frequency Level (http://forums.comodo.com/index.php/topic,2209.0.html) ;)" }-
Thanks for the link.
So it made me think going back to default( low) as I like few popups, however I will not prefer very low.
What u think?

[rdsu]

-{ Quote: "Thanks for the link.
So it made me think going back to default( low) as I like few popups, however I will not prefer very low.
What u think?" }-

If you want less alert messages and still informed, use the "Very Low" option and the "Do not show any alerts for the applications certified by COMODO", and if you still want even more less alerts, see this: Minimal recommended settings? (http://forums.comodo.com/index.php/topic,2483.0.html)

If you want to be informed about every program that listen or connects to internet, use at least the "Low" option and disable the "Do not show any alerts for the applications certified by COMODO".

Currently, I'm using the defaults, with the "Very Low" option, but in the future the database of application certified by Comodo will be very huge, and then I will change to "Low" again...

[aigle]

I thinK i will prefer low, with less pop ups and at the same time more control.
I like popups even for applications listed safe by comodo, so I changed that settings too already.

[duke1959]

Hey everyone, speaking of alerts. In my Logs I get a medium severity alert by Application Monitor that is denied. It is for System 0.0.0.0 nbsess (139) Protocol is TCP In. I believe this is for netbios, and I was just wondering if I should make a rule for this(I think I know how, but would appreciate help) or disable netbios. I don't share files or printing with other PC's, but I'm still not sure if it should be disabled. Although everything seems to be running fine with it denied access by Application Monitoring. Thanks, and I hope it was all right to post this here. I can also go to Comodo Forum, but I see quite capable users here and thought this may just be something simple to nswer and fix.

[Stem]

-{ Quote: "Hey everyone, speaking of alerts. In my Logs I get a medium severity alert by Application Monitor that is denied. It is for System 0.0.0.0 nbsess (139) Protocol is TCP In. I believe this is for netbios, " }-This alert is for system to "listen" on port for inbound netBIOS connection. With the setup you mention, you can safely block this.

[duke1959]

Stem! How have you been. I knew I could count on you for help. (As always) So I should just make a rule to block this and I won't get anymore alerts is this correct? Hey I also want to tell you that I have been posting in the Kaspersky Forums about my BSOD with AOL AVS and SKPF and told them about your explaination for it. I think they belieive me, but someone did tell me that it could be from installing and uninstalling software so much as well. Now this is true I have done way to much of this, but I think my PC is fine, (I hope) and have settled on using, obviously with my question, Comodo Firewall for good. It is truly a great Firewall. The only thing left is to settle on an Antivirus. I am currently either going to keep using AVG Free with it, or switch to Antivir after they fix a recent problem with the Guard statis not showing on every account on PC's with more than one user. (It happened to me after the big update last week as well) Anyway, I wonder since AOL AVS didn't seem to cause a BSOD with Comodo if this is because it is a superior Firewall in how it loads ect...? All right I have abused your kindness enough today, and I hope you get back to me about all this. Take care Sir.

[Stem]

-{ Quote: "So I should just make a rule to block this and I won't get anymore alerts is this correct?" }-This should be o.k., if the application cannot "listen" on port, then any inbound connection to that app/port should be dropped.
-{ Quote: "Hey I also want to tell you that I have been posting in the Kaspersky Forums about my BSOD with AOL AVS and SKPF and told them about your explaination for it. I think they belieive me, but someone did tell me that it could be from installing and uninstalling software so much as well." }-This could be put down as a possiblity, but my test PC had a clean OS install,... and the results where the same as yours. (so this problem is not related to your PC)
-{ Quote: "The only thing left is to settle on an Antivirus. I am currently either going to keep using AVG Free with it, or switch to Antivir " }-I personally would, between these 2, use AntiVir
-{ Quote: "I wonder since AOL AVS didn't seem to cause a BSOD with Comodo if this is because it is a superior Firewall in how it loads ect...?" }-No, the problems are driver related (this problem also exists with OP and other firewalls,.. a patch was released to try to solve the problem)

____
Stem

[duke1959]

Will use Antivir Stem. Although it does have a problem with the Guard statis not showing properly on more than one user accounts since last weeks update. You can check it out in the Antivir Forums. I think I know how to make the rule for the netbios thing. Thanks for putting my mind at ease, and I have learned my lesson. It will be Antivir, and Comodo Firewall for me from now on, and no more new stuff. (Well maybe Comodo's Antivirus some day when it improves) LOL. Stem, I truly would like to thank you once again for all your help. I don't know where you're from, what you do for a living, wether your married or single, or even how old you are, but I do believe your a good person, and that's enough for me. Take care, and even though I'm done with new stuff, I will seek you out if and when I have aquestion on the old stuff (CPF, Antivir) LOL. Take care.

[Stem]

-{ Quote: "Will use Antivir" }-This remember was my choice from the 2 you posted,... if you have no problem with Comodo+AOL AVS, then why not use this combo (I know you like AOL AVS)

[duke1959]

Someone told me that the way AVS scans in realtime can perhaps cause more of a slow down on your PC than the way Antivir does. Also other than the problem with the Guard statis I mentioned, the latest update is said to have made Antivir use much less RAM than before, and this can't be a bad thing. You take care for now, and I'll talk to you soon.

[mvdu]

I increased the memory on my computer to 1.5 GB, and Comodo seems to run better. But I have a question about server access: some apps need it to run. Does the network rule blocking IP IN/OUT make server access ok?

[mvdu]

Does anyone have advice about Comodo server access?

[ubuntu]

-{ Quote: "But I have a question about server access: some apps need it to run. Does the network rule blocking IP IN/OUT make server access ok?" }-

Hi

if you use default network rule, and whatever you set in application monitor, the inbound TCP/UDP traffic will be blocked.

if you add network rules to allow TCP/UDP specific port traffic . like eMule TCP 4662. if eMule hadn't run, TCP 4662 would be blocked by CPF.

Regards

[mvdu]

So you don't have to create an application rule blocking inbound, as long as the default network rule is on?

[ubuntu]

-{ Quote: "So you don't have to create an application rule blocking inbound, as long as the default network rule is on?" }-
Yes, of course.
-{ Quote: "
First, lets talk about how CPF works.

CPF has 2 different LAYERED parts : An application based firewall which is responsible for detecting which application is using what transport + network addresses(i.e. which of TCP/UDP orts, + IP addresses). This firewall is not interested in any TCP flags or ICMP replies. This is mostly necessary to provide a good outbound defense. But this type of protection is not enough to provide an adequate inbound defense because of the fact it sees the packets after TCP/IP protocol stack receives them. This means TCP/IP can not be protected enough against incoming attacks like flooding etc. This is where CPF’s second part, network firewall, comes into the scene. The network firewall sees the incoming packets, just after the underlying Ethernet miniport receives them i.e. before TCP/IP protocol. So the scenarios are shown below.

----------------------

Outgoing packet->Application firewall -> Network firewall,

Incoming packet -> Network firewall -> Application firewall

This is how layered filtering works in CPF." }-