Comodo Firewall Pro Beta

[xStylezx]

The beta for the new Comodo Firewall Pro is out today! What a nice surprise to get it earlier than forecasted;D

http://forums.comodo.com/cfp_beta_corner/cfp_v307208_beta_for_vista_x32_and_x64_is_now_available-t11414.0.html

[fedore]

Thx for info, nice news :)

[xStylezx]

Yep,its excellent news.Also it is running fine for me so far with no hiccups!

[dwax]

Anyone have screenshots of it??

[xStylezx]

There was screenshots posted over at the comodo forums i believe.Not sure what thread though

[Jadda]

Cool! Thanks.

Will check it out :)

[Coolio10]

I want people who never liked comodo to try this version. I wanna see the look on their faces :D. Some like :o .

[Bls440]

Still featuring a nice violation of privacy ? :)

[Coolio10]

{QUOTE-> Still featuring a nice violation of privacy ? :) <-QUOTE}

Still got no evidence ;) .

[Seer]

{QUOTE-> Still got no evidence <-QUOTE}

Perhaps Bls440 has some, he sure sounds like he knows what he's talking about. Or are these just symptoms of FUD spreading slowly?

[Bls440]

Sure.

http://img522.imageshack.us/my.php?image=20070808200520ng1.jpg

By the way, I've never had anything against Comodo, more like the very opposite. I've always suggested Comodo on every security forum I've registered, helped everyone to fix their issues with rules creation, etc.

However, I've been wondering for so much time, how could that magnificient firewall could be free ? .. Well, here's the answer ...

[Coolio10]

{QUOTE-> Sure.

http://img522.imageshack.us/my.php?image=20070808200520ng1.jpg

By the way, I've never had anything against Comodo, more like the very opposite. I've always suggested Comodo on every security forum I've registered, helped everyone to fix their issues with rules creation, etc.

However, I've been wondering for so much time, how could that magnificient firewall could be free ? .. Well, here's the answer ... <-QUOTE}

I am sorry but that has nothing to do with the privacy ??? .

{QUOTE-> here we go... another one....
someone called Bls440:

Just did some Spyware Doctor scan today ...

http://img522.imageshack.us/my.php?i...8200520ng1.jpg

Also I should precise that I had uninstalled Comodo already ...

Unbeliavable!

The folder that this chap refers to is the folder for safelist! This folder is created during installation and each file represents a safe file. there is a complex formula about how this is handled due to security reasons (as we don't want anyone messing with the ability to inject safe file into this list without getting certified by comodo). However this folder and all these files are to do with the safelist and nothing todo with advertising at all!

So instead of uninstalling comodo bls440 should inform his antispyware provider about their False positive Wink

Melih <-QUOTE}

Nice try ;) .

http://forums.comodo.com/help/phoning_home-t11317.0.html;msg80328#msg80328

[Bls440]

Why should I trust Comodo about this ?

I've never heard about any False positive complain with Spyware Doctor.

Their explanation is quite blur btw :)

I don't wanna nourish the FUD/troll or whatever that is, I wanna know the truth like everyone in here I guess.

[Pedro]

Bls440: Spyware Doctor is known for false positives. Ask around, search the forum.
{QUOTE-> Why should I trust Comodo about this ? <-QUOTE}
You're being unfair, to them, yourself, and us, the users.
Contact PC Tools and ask about it /report it. Please don't say "why should i". We get to a dead end!

[Bls440]

{QUOTE-> Bls440: Spyware Doctor is known for false positives. Ask around, search the forum.

You're being unfair, to them, yourself, and us, the users.
Contact PC Tools and ask about it /report it. Please don't say "why should i". We get to a dead end! <-QUOTE}

No need to talk this way mate. I wanna know the truth, and I'd be glad if SD admited that it was a false positive, as I'm using Comodo firewall myself, and very satisfied by it. I've also recommended it to everyone.

Of course, I've contacted Spyware Doctor support and asked them to investigate, let's just wait for their answer.

[Pedro]

{QUOTE-> No need to talk this way mate. <-QUOTE}
I was rude?
I'm not judging you, i'm answering to help you. Perhaps "unfair" has taken other meanings in the english dictionary recently. ;)

Cheers

[rhuds13]

For pics go to Avast Forum in General: Surprise from Comodo. Looks good will have to try CFP 3 and see how much better than 2.4. Without proof I will not believe they are bad. I use Comodo on one system and PC Tools on another and both seem ok.

[acknsyn]

{QUOTE-> Perhaps Bls440 has some, he sure sounds like he knows what he's talking about. Or are these just symptoms of FUD spreading slowly? <-QUOTE}
I say FUD. I ran a sniffer on a PC with commodo and there was no phoning back to commodo. I do have autoupdate disable.

[rhuds13]

Great. It seems that someone has a grudge against Comodo and just wants to spread manure. Some people just can't believe that anything really good can be for free.

[Pedro]

I do think Bls440 is not after that. He posted some concerns/doubts.
Like he misinterpreted me, i think this is the case too. No harm is done i think.

[sukarof]

I have not used Comodo for quite a while. I tried the alpha but it kept crashing on me so I couldnt explore it. I understand it had some kind of sandboxing. Does that work yet?

[aigle]

Is this thread about comodo and privacy or about latest beta?

[rhuds13]

Beta. Just had to ghost back to 2.4. Had problems with IE7 loading pages. But that may just be my system setup. Posted at CFP Beta forum and will wait for final release or may just switch this system over to PCTools FW for a while. Still like the CFP 2.4 version also. Just torn as to which I really like the best.

[Graystoke]

I installed it, checked it out and then uninstalled it. Way too many pop ups in learning mode. Very annoying. I don't like the new GUI at all. The GUI in 2.4 is much better. Just my two cents. :)

[aigle]

GUI is not so nice but it has option for skinning, sp may be OK.
Its HIPS cause too much slow down, learning mode is slow too.
Pop ups a bit confusing than other HIPS. Custom made HIPS policies not working well( or I am not able to understanf how they work).

I will prefer a dedicated HIPS alongwith version 2 ATM.

[gdiloren]

{QUOTE-> Sure.

http://img522.imageshack.us/my.php?image=20070808200520ng1.jpg

By the way, I've never had anything against Comodo, more like the very opposite. I've always suggested Comodo on every security forum I've registered, helped everyone to fix their issues with rules creation, etc.

However, I've been wondering for so much time, how could that magnificient firewall could be free ? .. Well, here's the answer ... <-QUOTE}
Has anybody else found keenvalue with CFP on his PC, please report. I'd be curious to see if it's just one case in the wild...::)

[Bls440]

I'm waiting for PC tools answer about this matter. They sent me an email to know my purchase details, but I'm only trialing Spyware Doctor, I hope they will assist me anyway. I'll give some update as soon as they answer me ;)

So how is that new Beta ? Is it as light as the Alpha version ?

[Coolio10]

{QUOTE-> I'm waiting for PC tools answer about this matter. They sent me an email to know my purchase details, but I'm only trialing Spyware Doctor, I hope they will assist me anyway. I'll give some update as soon as they answer me ;)

So how is that new Beta ? Is it as light as the Alpha version ? <-QUOTE}

Less than 9MB with all processes(2).

[WSFuser]

I know its only a beta but has anyone tried using p2p or gaming with it?

[rdsu]

{QUOTE-> I know its only a beta but has anyone tried using p2p or gaming with it? <-QUOTE}
I can't make a rule to make uTorrent work well with it... :(

I'm waiting, on Comodo forum, some help abou that...

[ccsito]

{QUOTE-> GUI is not so nice but it has option for skinning, sp may be OK.
Its HIPS cause too much slow down, learning mode is slow too.
Pop ups a bit confusing than other HIPS. Custom made HIPS policies not working well( or I am not able to understanf how they work).

I will prefer a dedicated HIPS alongwith version 2 ATM. <-QUOTE}

I expect that the trend will make it eventually become a suite program. So you will have AV, AS, AT, Firewall, HIPS all in one program.:isay:

[Seer]

Hello. :)

{QUOTE-> Sure.

http://img522.imageshack.us/my.php?i...8200520ng1.jpg <-QUOTE}

This is not evidence.

{QUOTE-> I'm waiting for PC tools answer about this matter. <-QUOTE}

You don't know what that is, you actually asked a question about that. That's a "U". And you got your answer from Melih, but you're still not sure. That is a "D". I'm sure there's an "F" somewhere around aswell. ;)
But it really doesn't matter, enough with this issue already...

{QUOTE-> I can't make a rule to make uTorrent work well with it... <-QUOTE}

Well I briefly looked up your thread on Comodo forums, couldn't find it, so...
what exactly do you mean? The rule is not obeyed or it could not be created? I tried the rule for utorrent/bitcomet with alpha, and it worked nicely. I would expect that it should work for beta too. ???

I actually like this GUI more than the previous. ;D

Cheers.

[rdsu]

{QUOTE-> Well I briefly looked up your thread on Comodo forums, couldn't find it, so...
what exactly do you mean? The rule is not obeyed or it could not be created? I tried the rule for utorrent/bitcomet with alpha, and it worked nicely. I would expect that it should work for beta too. ??? <-QUOTE}

See the reply #21, here: CFP v3.0.7.208 Beta for XP/Vista x32 and x64 is now available! :) (http://forums.comodo.com/cfp_beta_corner/cfp_v307208_beta_for_xpvista_x32_and_x64_is_now_available-t11414.15.html) ;)

[Seer]

Yes, that worked with alpha. :-\ And you still get only local connections? Have you tried a packet sniffer? I mean, if that doesn't work, that's a serious bug, the firewall is practically unusable...

[rdsu]

I can't let the firewall to allow specific ports for applications that acts as a server, like P2P...

Only after uninstall the Firewall I can get the P2P applications to work well again...

[Seer]

I thought to suggest trying other P2P applications, as it may of been a problem with utorrent and Comodo... but obviously it's not.
OK, I'll try this beta and see if it does the same to me. I'll report back... tomorrow... have to sleep now (3am here) :)

Cheers.

[mvdu]

I'm convinced Comodo isn't spyware. People would have noticed if some spyware program like the one mentioned is bundled in. If SpywareDoctor e-mails back that it isn't a FP, I would still trust Comodo. PCTools' reputation is no better.

The beta so far doesn't have that annoying problem of forgetting rules. And I like how Defense+ learns.

[twl845]

{QUOTE-> I'm waiting for PC tools answer about this matter. They sent me an email to know my purchase details, but I'm only trialing Spyware Doctor, I hope they will assist me anyway. I'll give some update as soon as they answer me ;)

So how is that new Beta ? Is it as light as the Alpha version ? <-QUOTE}
Are you aware that PC tools will automatically renew your PC product at the end of the year without consulting you? Then you will have 2 days to cancel (if you can contact them by e-mail in time.)

[twl845]

{QUOTE-> I expect that the trend will make it eventually become a suite program. So you will have AV, AS, AT, Firewall, HIPS all in one program.:isay: <-QUOTE}
Not according to Comodo.

[aigle]

{QUOTE-> I expect that the trend will make it eventually become a suite program. So you will have AV, AS, AT, Firewall, HIPS all in one program.:isay: <-QUOTE}
May be but I think this beta will take a long time to be mature.
Anyway we need it as there are not many HIPS for vista so far.

[twl845]

Not to restart the suite or stand alone debate, but I along with alot of other folks won't want to give up their favorate AV like NOD32 to do a suite which usually isn't as effective as stand alones, just to keep Comodo FW. If Comodo provided a suite, it would be in their best interest to also keep the stand alone apps as well.;)

[Coolio10]

{QUOTE-> See the reply #21, here: CFP v3.0.7.208 Beta for XP/Vista x32 and x64 is now available! :) (http://forums.comodo.com/cfp_beta_corner/cfp_v307208_beta_for_xpvista_x32_and_x64_is_now_available-t11414.15.html) ;) <-QUOTE}

Think i know what your talking about. Do you mean when you do port checker inside utorrent it comes up closed? If so than you need a network rule to let it in.

http://forums.comodo.com/faq_for_comodo_firewall/emule_and_bittorent_tuttorials-t411.0.html;msg2529#msg2529

[rdsu]

{QUOTE-> Think i know what your talking about. Do you mean when you do port checker inside utorrent it comes up closed? If so than you need a network rule to let it in.

http://forums.comodo.com/faq_for_comodo_firewall/emule_and_bittorent_tuttorials-t411.0.html;msg2529#msg2529 <-QUOTE}
Like I said, I already did that, but didn't worked on this beta...

[Seer]

Hello.

VaMPiRiC_CRoW, dunno what's wrong there, but Comodo rules work fine here - the first one is uTorrent, the second BitComet -

192531

192532

??? ???

[rdsu]

Show me where you put the rule.

[Seer]

Hello VaMPiRiC_CRoW.:)

Here are the rules -

Network -

192533

Application -

192534

They could be a little tighter for outbound by restricting lower local ports, but this is in a VM, so it really doesn't matter.

Cheers.

[xStylezx]

I have had nothin but a small bug or two in this beta version.Much more stable than the alphas.I can actually keep it installed.As far as p2p,no problems here whatsoever with utorrent,shareaza.Also im not getting any slowness from hips or any other part of the gui/app.I guess im in the minority because i like the new interface and design.

[Pedro]

{QUOTE-> Like I said, I already did that, but didn't worked on this beta... <-QUOTE}
VC, this version at least conflicts with Avast!'s web shield. With that on, i can't browse.
Maybe some program is preventing Comodo from opening the port.

[rdsu]

Seer,

Thanks. I made a rule like that in Global rules, and also tried adding a rule for the application, even when this is not necessary, but without result... :(

Pedro,

Maybe is a problem with another program, since I'm not using avast!...
I try again when I will had some time...

Thanks to both. ;)

[Seer]

Hi Pedro :)

Browsing works with avast! (4.7) and this Comodo stuff here. :)

192539

avast!'s WebShield works as a proxy. Do you have your browser set to use proxy?

[rdsu]

Seer,

You have 2 rules to allow outgoing and other 2 rules to allow incoming.
That is a software bug, right?

If you remove the incoming rules, that you have for each application, the P2P works well?
I'm asking this because that rules shouldn't be necessary...

I will try the next beta version of CFP, because this one is to buggy for me...
But it's normal, since this new version is completly new...

[Seer]

VaMPiRiC_CRoW,

hello again. Sorry that you had to post the same question twice, I completely (unintentionally) missed your post. :-\ More screenshots from me now. :)

{QUOTE-> and also tried adding a rule for the application, even when this is not necessary <-QUOTE}

Unnecessary? What exactly do you mean? A P2P application would need to have inbound rules, I have just reinstalled Comodo v2 to check how that version works with server apps - it gives me a popup for uTorrent to "act as a server". If I choose to remember that popup, Comodo places this rule in the application filter -

192555

The lights are all green with uTorrent (no need for screenshots on this, I think). I just restricted the rule to specific port in v3, otherwise it is the same principle.

{QUOTE-> If you remove the incoming rules, that you have for each application, the P2P works well? <-QUOTE}

If I delete inbound application rules in v3, I get this in the logs (makes sense to me) -

192554

and also red lights in torrent clients (that happens without "act as server" rule in v2 also). Which is not good. The screenshot shows blocked UDP only, as I didn't have any torrent running at the time - no transfer occuring.

Now, am I doing something wrong here?

[Pedro]

Seer, no i don't have a proxy.

What VC is saying is that it should not need an inbound rule to function at its basic mode. Your application rules are not the same as the Global rules, if it still works as 2.4.
Global rules should be the Network Monitor, where the SPI is. Application rules work differently.
If it doesn't work just by answering pop-ups, something is wrong.

I rarely use an inbound rule (a true inbound) for Emule these days. Downloads are slower, but it's sufficient for small files.

[Seer]

{QUOTE-> no i don't have a proxy. <-QUOTE}

Yes, you do have a proxy if you use avast!'s WebShield :) WebShield is a proxy, as I said, and all http comms go through it. Set your browser to use a proxy, your browsing should work then. If you need assistance, please let me know :)

{QUOTE-> it should not need an inbound rule to function at its basic mode <-QUOTE}

The "basic" mode? There is no basic mode for server apps, either they work as server or they don't.

{QUOTE-> Global rules should be the Network Monitor, where the SPI is <-QUOTE}

SPI has nothing to do with server rules.

{QUOTE-> I rarely use an inbound rule (a true inbound) for Emule these days. Downloads are slower, but it's sufficient for small files. <-QUOTE}

Well, this is your preference, but in this way (without inbound rule), eMule doesn't work as a server application.

[Pedro]

{QUOTE->
SPI has nothing to do with server rules. <-QUOTE}
oh?
{QUOTE->
Well, this is your preference, but in this way (without inbound rule), eMule doesn't work as a server application. <-QUOTE}
Of course it doesn't work as a server, that's the whole idea ;)

[Escalader]

{QUOTE-> I expect that the trend will make it eventually become a suite program. So you will have AV, AS, AT, Firewall, HIPS all in one program.:isay: <-QUOTE}

I am looking forward to trying out the "production" version of V3 not the Beta since smarter users than me are running it and it will improve over time.

There is a market for suites, ZA , KAV NIS come to mind.

BUT I hope that the prediction on CFW becoming a suite in the sense of having a AV and an ASW is not proven out. For my needs I prefer to have a pure FW + HIPS and then the ability to let me mix and match AV's and ASW's at will. Best IMHO not to depend on 1 vendor for ALL our secuity needs.

So if we need an example from CP it would be ZA Pro minus the ASW piece and a few other bells and whistles like the vault.

There will be 2 markets:

1) suites for ordinary users (not power techi's) give me 1 solution I want to depend on that approach it is easy and simple!

2) The build our own suites by adding and replacing pieces as tools improve and vendors come and go as in the tradition of Wilder's layered best of breed approach.

So if I'm right the debate about which is best when both will exist and continue is how to say this , a waste of time;D

But this is just an opinion!

[rdsu]

Seer,

Yes, if we have the Application Monitor enabled, we must have a rule to allow incoming traffic for that application, that is the same to allow that application to act as a server...

But I also added that rule and didn't worked, so must be a conflit with another program, since it works with you...

The SPI is just to keeps the track of the state of network connections...

[Seer]

{QUOTE-> But I also added that rule and didn't worked, so must be a conflit with another program, since it works with you... <-QUOTE}

Yes VC, that's a possibility also. After all, as you said, it's only a beta :) Of course, you have the port forwarded in your router (if you use one), I presume?

BTW, VC et al, WTF is this? -

192560

Hardcoded rules in Comodo? Why?

[Seer]

{QUOTE-> oh? <-QUOTE}

Server rules need to bypass the SPI, so the unsolicited connections could be accepted by the server app. Thus the need for inbound rule.

{QUOTE-> Of course it doesn't work as a server, that's the whole idea ;) <-QUOTE}

??? Could you elaborate this please? I don't see the point (idea) in using a server application without server rules...

[Pedro]

{QUOTE->

BTW, VC et al, WTF is this? -

192560

Hardcoded rules in Comodo? Why? <-QUOTE}
Edit it to block and you'll see it's not hard coded.
{QUOTE-> Server rules need to bypass the SPI, so the unsolicited connections could be accepted by the server app. Thus the need for inbound rule. <-QUOTE}
Exactly.
{QUOTE->
??? Could you elaborate this please? I don't see the point (idea) in using a server application without server rules... <-QUOTE}
I think in this case you're hanging on the concepts too much. This is for my personal use. I'm just using Emule to download stuff.

[rdsu]

Seer,

CFP at the beginning, let you choose to make a scan for known applications and then create rule for them.
That system file is needed to allow you to connect to the Internet, and of course that Comodo files are trustful... :)

I didn't try, but I think, and hope, that list will be empty if we choose not to scan for known applications...

[Seer]

Hi VC :)

{QUOTE-> CFP at the beginning, let you choose to make a scan for known applications and then create rule for them. <-QUOTE}

I actually carefully looked where to skip this step. I never do such things, as I like to make my own rules. So, in short, I scanned nothing "trusted" with Comodo.

{QUOTE-> and of course that Comodo files are trustful... ;) <-QUOTE}

Are they indeed? LOL. OK... ;)

Cheers :)

EDIT:

{QUOTE-> Edit it to block and you'll see it's not hard coded. <-QUOTE}

Have you actually installed this firewall? They can't be edited... or removed.

{QUOTE-> I think in this case you're hanging on the concepts too much. This is for my personal use. I'm just using Emule to download stuff. <-QUOTE}

I am so sorry. I respect your opinion/needs :)

Cheers again :)

[Pedro]

{QUOTE->
Have you actually installed this firewall? They can't be edited... or removed.
<-QUOTE}
Heh, you should report it as a bug. It worked fine here. One of the first things i did.
It is not ready for prime time for sure, but we should report all this to help. :thumb:

EDIT: i can't try it now, as i'm not in XP, but i think you can't edit the individual rules (below the process name), but you can edit by clicking the process name. Change it to custom and create the rules from scratch.

[Seer]

{QUOTE-> Heh, you should report it as a bug. <-QUOTE}

Yes, you are right, that is a bug. All of a sudden, my torrent rules became hardcoded as well ???

Oh, wait, svchost and system rules can be deleted now... ??? WTF ???

OK, alpha was better than this. I believe any further discussion is pointless. This is an unpredictable version... behaves differently on different systems... we almost got into a flame war because of it.

Cheers guys.:)

EDIT:

{QUOTE-> EDIT: i can't try it now, as i'm not in XP, but i think you can't edit the individual rules (below the process name), but you can edit by clicking the process name. Change it to custom and create the rules from scratch. <-QUOTE}

Yes, but I haven't changed anything manually.

[rdsu]

Seer,

I use that feature to have less alert windows about good applications...

I don't like annoying me with useless alerts... :)
That is why I don't like normal HIPS...

The alpha version didn't have a lot of the new features implemented, so...
I hope the next beta becames much more stable...

[Seer]

Hello. :)

OK, I have to apologize to anyone reading this thead and especially to lurking Comodo officials ;D I was quick to call the rules "hardcoded". They are not, I see how that works now...

But actually the rulesets in application monitor are changing policies randomly! From "outbound only" to "custom" and back. Also, deleted rules are reappearing again ??? Very strange. I don't touch the firewall, I just keep it opened in a VM and every few minutes I take a glance at it - it definitely has a mind of its own. I will install it in a FD-ISR snapshot when I find time and test it more. I will also try it on another (test) PC. If I find anything unusual (new or reoccuring), I'll report my findings here (not there).

Cheers to all.

[mvdu]

I spoke too soon. I click on remember this action for the defense+, and it still forgets the rule on the next boot up.

[Escalader]

{QUOTE-> Hello. :)

OK, I have to apologize to anyone reading this thead and especially to lurking Comodo officials ;D I was quick to call the rules "hardcoded". They are not, I see how that works now...

But actually the rulesets in application monitor are changing policies randomly! From "outbound only" to "custom" and back. Also, deleted rules are reappearing again ??? Very strange. I don't touch the firewall, I just keep it opened in a VM and every few minutes I take a glance at it - it definitely has a mind of its own. I will install it in a FD-ISR snapshot when I find time and test it more. I will also try it on another (test) PC. If I find anything unusual (new or reoccuring), I'll report my findings here (not there).

Cheers to all. <-QUOTE}

Hey Seer I don't see you need to apologize for reporting and your learnings on these matters! People read your posts and check them out and gain!

BTW I pulled out of my own learning thread on CFW 2.4.15 because of this very issue, I called it "scrambling the rules" at the time and gave up on 2.4.
My hope is that this issue will be dealt with soon! It seems this piece of code on rules has "dementia" fouled up logic and can't remember what you told it to remember.

[Nubiatech]

{QUOTE-> I spoke too soon. I click on remember this action for the defense+, and it still forgets the rule on the next boot up. <-QUOTE}

The newer beta version 3.0.8.214 released yesterday (8/23) with many bug fixes:
http://forums.comodo.com/cfp_beta_corner/cfp_308214_beta_is_now_available_for_download-t11950.0.html

[tamdam]

{QUOTE-> The newer beta version 3.0.8.214 released yesterday (8/23) with many bug fixes:
http://forums.comodo.com/cfp_beta_corner/cfp_308214_beta_is_now_available_for_download-t11950.0.html <-QUOTE}

I just tried out the updated BETA and I have to say its MUCH IMPROVED from the last beta. Looking very polished indeed. Last beta had too many popups but the by-default learning mode makes the HIPS so much more practical to use for most users.

[Bubba]

One post un-related to this thread's topic was placed in this created thread (http://www.wilderssecurity.com/showthread.php?t=184573) for further comments.

Bubba