comodo xbox live and ics

[damian666]

Hi
Im using comodo firewall which i really like as my computer and internet speed seems faster.
The problem i have is sharing the usb sagem modem tiscali connection with xbox 360 live it worked fine using sygate which im sure allowed ics anyway.I connect the xbox to the xp pc ethernet socket which is a reltek nic card using a crossover wire.Comodo allows me to connect to xbox live when i turn off network monitor which i do not think is a good idea could be wrong not sure, so i know i need to set up comodo to allow my xbox live connection through.There is a guide on the comodo forum which ive tried to follow
without much luck.I have some ip addresses which include the one my xbox shows the one from my computer and ethernet card on my pc its just knowing how to configure the firewall protocals etc.I know i need to make a new trusted network would this trusted network be my ethernet card or my pc or xbox?
I really would like to keep this firewall as its highly rated and seem very light on my system resources can anyone please help
THANK YOU
Damian

[19monty64]

When leaving network monitor ON and trying to connect to XboxLive, do you get a pop-up from Comodo? Is Comodo still in learning-mode? Are you using MediaCenterEdition or just xp?

[damian666]

Hi
Thanks for looking at my post no i do not get any pop ups from comodo when connecting to xbox live.Not sure if comodo is still in learning mode do not get many pop ups now and i do have windows xp media center
THANKS

[19monty64]

Try to establish a new connection from the xbox to pc, and if that doesn't work, I had to set up a new connection. Leave the xbox @ the set up screen and re-install the extender.exe in the pc and it will ask for a new 8-digit code for the new account. This should trigger a pop-up from comodo...

[19monty64]

comodo has 3 modes:block all,allow all, and learning...

[damian666]

sorry its on custom at the mo

[19monty64]

Yes, custom-mode. If comodo is already installed, then the extender is re-installed, comodo will monitor installation and give pop-up then. Creating a new link will create a new MCX?-file in c:\documents and settings. If you have MCX1 & MCX2, MCX3 will be created and MCX2 will no longer be used.

[damian666]

tried what you said comodo put up a popup or two which i approved whilst i was setting up a new media center connection but windows media center will not finish set up wizard and keeps generating a crash report so still no luck heres a log of comodo maybe it will help
THANK YOU
Log Scope:: Today


Date/Time :2007-05-07 11:25:56
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.240.47, Port = nbsess(139))
Protocol: TCP Incoming
Source: 88.105.240.47:1593
Destination: 88.105.52.241:nbsess(139)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:25:06
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.40.104, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.40.104:4928
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:24:46
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.217.174, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.217.174:1053
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:24:41
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.104.174.100, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.104.174.100:3712
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:24:26
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.172.137, Port = 2967)
Protocol: TCP Incoming
Source: 88.105.172.137:41441
Destination: 88.105.52.241:2967
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:24:21
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.172.137, Port = 2967)
Protocol: TCP Incoming
Source: 88.105.172.137:41441
Destination: 88.105.52.241:2967
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:23:16
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.100.85, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.100.85:3741
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:23:01
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.240.47, Port = nbsess(139))
Protocol: TCP Incoming
Source: 88.105.240.47:3224
Destination: 88.105.52.241:nbsess(139)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:23:01
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.163.205, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.163.205:3620
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:21:33
Severity :Medium
Reporter :Component Monitor
Description: Unknown Components (ehExtHost.exe)
Application: C:\WINDOWS\ehome\ehExtHost.exe
Parent: C:\WINDOWS\ehome\ehshell.exe
Protocol: UDP Out
Destination: 80.225.250.178::dns(53)
Details: C:\WINDOWS\ehome\ehExtHost.exe contains 5 components to be approved
Components: c:\WINDOWS\assembly\GAC\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll
c:\WINDOWS\assembly\GAC\microsoft.mediacenter\6.0.3100.0__31bf3856ad364e35\microsoft.mediacenter.dll
c:\WINDOWS\assembly\GAC\ehiextens\6.0.3000.0__31bf3856ad364e35\ehiextens.dll
c:\WINDOWS\ehome\ehshell.exe
c:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll

Date/Time :2007-05-07 11:21:10
Severity :Medium
Reporter :Component Monitor
Description: Unknown Components (ehExtHost.exe)
Application: C:\WINDOWS\ehome\ehExtHost.exe
Parent: C:\WINDOWS\ehome\ehshell.exe
Protocol: UDP Out
Destination: 80.225.250.178::dns(53)
Details: C:\WINDOWS\ehome\ehExtHost.exe contains 5 components to be approved
Components: c:\WINDOWS\assembly\GAC\system.runtime.remoting\1.0.5000.0__b77a5c561934e089\system.runtime.remoting.dll
c:\WINDOWS\assembly\GAC\microsoft.mediacenter\6.0.3100.0__31bf3856ad364e35\microsoft.mediacenter.dll
c:\WINDOWS\assembly\GAC\ehiextens\6.0.3000.0__31bf3856ad364e35\ehiextens.dll
c:\WINDOWS\ehome\ehshell.exe
c:\WINDOWS\assembly\GAC\System.Web\1.0.5000.0__b03f5f7f11d50a3a\system.web.dll

Date/Time :2007-05-07 11:21:06
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.210.55, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.210.55:4760
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:20:46
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.217.174, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.217.174:2483
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:20:41
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.99.157, Port = MS-ds(445))
Protocol: TCP Incoming
Source: 88.105.99.157:2985
Destination: 88.105.52.241:MS-ds(445)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:20:11
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.226.130, Port = ms-rpc(135))
Protocol: TCP Incoming
Source: 88.105.226.130:2118
Destination: 88.105.52.241:ms-rpc(135)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

Date/Time :2007-05-07 11:19:27
Severity :Medium
Reporter :Component Monitor
Description: Unknown Components (ehshell.exe)
Application: C:\WINDOWS\ehome\ehshell.exe
Parent: C:\WINDOWS\explorer.exe
Protocol: UDP Out
Destination: 80.225.250.178::dns(53)
Details: C:\WINDOWS\ehome\ehshell.exe contains 1 components to be approved
Components: C:\WINDOWS\system32\shimgvw.dll

Date/Time :2007-05-07 11:19:26
Severity :Medium
Reporter :Network Monitor
Description: Inbound Policy Violation (Access Denied, IP = 88.105.241.155, Port = MS-ds(445))
Protocol: TCP Incoming
Source: 88.105.241.155:4396
Destination: 88.105.52.241:MS-ds(445)
TCP Flags: SYN
Reason: Network Control Rule ID = 7

[19monty64]

Comodo forum has a posting "Testers needed to confirm CPF games rule settings." which is giving specific firewall-rules per game. Sounds like a lot of work unless you only play 1-2 games. An easier work-around that I ended up doing was getting a router that allows f/w-ruleset...and running windows without a firewall. That way, xbox has a direct internet-connection. If you store your music in pc, that is the only time xbox has to connect with pc, and it's easier to config router for application ruleset. Much easier on ram for pc too!

[damian666]

Thanks again perhaps ill try that ive been messing around with this firewall for 2 weeks now
THANK YOU

[19monty64]

Setting up a new connection will auto-config xp-firewall to allow by rule.....maybe the rules within xp-fw can help you config comodo???