check network rules please

[bitchenmaui]

Hi, I'm here everyday just not logged in.

I need someone to check my network rules and see if I'm safe or do I need to tighten them up. I am new to comodo 2.4 and the rules. I'm running WXP-SP2.
I posted at Comodo and no one ever answered.

Thank you

http://img204.imageshack.us/img204/5619/networkrulesxs8.png

[/URL]

http://img204.imageshack.us/img204/6831/applicationruleszf3.png

[Coolio10]

When your that organized i do not see how you can't be secure.

[bitchenmaui]

Thank you for the compliment Coolio10. I've always been real organized.

So my rules look ok? Can I fine tune them any?

[Coolio10]

-{ Quote: "Thank you for the compliment Coolio10. I've always been real organized.

So my rules look ok? Can I fine tune them any?" }-
They are fine. Tune them more and you will need several rules for each app.

[Stijnson]

Is it absolutely necessary to create rules by yourself in Comodo (2.4 or 3.0)? I'm still deciding on which firewall to install (Comodo/OA/perhaps ZAP), but I'm totally unfamiliar with rule making.
I'm worried that I will weaken the defense if I start making my 'own rules'.

[bitchenmaui]

Thank you so much Coolio10, I really appreciate it. Have a great day.




Stijnson, comodo does create it's own default rules,and you can set it and forget it.


http://forums.comodo.com/help_for_v2/configuring_firewall-t7945.0.html;msg57637#msg57637

No it is not absolutely necessary to create rules by yourself in Comodo (2.4 or 3.0)

Then read here.


http://forums.comodo.com/frequently_asked_questions_faq_for_comodo_firewall/summary_of_network_rules-t5340.0.html

[Stijnson]

Thanks Bitchenmaui, those links are very helpful. :thumb:
I'm behind a router (with firewall) so I hope all things go well during setup.

[jobeard]

Well, I'm even tighter than that.

local lan = 192.168.0.1 - 192.168.0.9
local broadcast 192.168.0.255

I allow Print/File sharing only on the local Lan segment
{allow tcp/udp in/out localLan localLan ports 13,445}
and my router performs MAC Filtering to ensure ip address assignments.

Now I can safely let anyone (eg visitor) attach to my lan and they get full
access to the net; just not my systems.

[bitchenmaui]

Stijnson, you are very welcome.




jobeard, you know alot more than I, I'm new to the rule thing.
I only have one pc and modem/router westell 6100 so I don't really know about that stuff.