My disappointments with: Comodo Personal Firewall 2.4.18.184

Discussion in 'other firewalls' started by concerned807, Jun 8, 2007.

Thread Status:
Not open for further replies.
  1. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    I am trying Comodo Personal Firewall 2.4.18.184 for a week now, and I am NOT very happy with it!!!

    My disappointments:
    1. Comodo slows down my web browsing speed dramatically - getting lots of timeout messages.
    And this gets worse when my PC is on for consecutive days. By worse, I mean I could not open a single web page. I know I am online as my uTorrent is downloading still.

    BTW I did disable "Monitor DLL Injections" in "Application Behavior Analysis", as I also have SSM running...

    2. Comodo sucks up a lot of CPU
    Comodo sucks up 15-70% of CPU while my uTorrent and/or eMule is running. With that amount of CPU gone, it takes minutes to open a program and I can hardly watch a movie uninterrupted with Comodo on.

    3. Comodo's logging is a joke - very poorly designed
    I will lose my log details every time I reboot my PC.

    4. Comodo's uninstaller is crappy
    Although I have not got rid of Comodo yet. I am increasingly concerned with the official uninstaller. The official forum reports that users are having hell of difficult time to decipher which registry keys to get rid of in order to complete remove Comodo. BTW if anyone has the complete list of registry search keywords to use while running Regedit.exe, please advise by all means. I'd much appreciate it!

    Security and performance are trade-off? I don't think so!
     
    Last edited: Jun 8, 2007
  2. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello.

    You have said nothing new. Those are all known issues with Comodo. I had all of these, although your case is a bit extreme. There are some workarounds. My CPU utilization stopped when I disabled monitoring DLL injections, and it didn't slow down my browsing (not that I noticed). There is v3 on the way though...

    Cheers.
     
  3. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    Hey Nick!
    Funny I just read loads of your comments about Comodo and its trouble with heavy P2P traffic (massive simultaneous connections).

    You replied that you had all the issues I am having now. Did you also have problems with uninstalling Comodo? I am looking for sorta guide for complete manual uninstall besides ones posted on the official forum. Esp. concerning registry cleaning... Just in case of course!

    Inexplicably during the past 4-5 hours, Comodo's CPU usage seemed to come down and have stabilized to less than 5%. It was near the end of my weekly testing of this firewall. All this is miraculous and I can't understand...

    BTW, to resolve the Comodo's CPU issues, I tried all tricks including disabling Monitor DLL Injections, as detailed in the below thread. However I thought it was reckless to disable Protocol Analysis.
    http://forums.comodo.com/index.php/topic,6819.0.html

    If I read your posts correctly, you do recommend Kerio 2.15 or Jetico 2.xxxx for heavy P2P users. Don't you?

    Thanks for the reply Nick:)
     
    Last edited: Jun 8, 2007
  4. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Yes, I ranted before on that.

    By all means. Kerio gave me some troubles with VMware, so I had to ditch it, and I'm currently using Jetico 2. No problems with final versions whatsoever, and I do some heavy filesharing sometimes. Almost no resources used at all. Jetico does require some maintenance though, but if you don't mind that, it's The major firewall.
     
  5. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    How many files are you downloading? I'm a massive P2P user, Comodo is very light over here, without monitor dll injection (sometimes it even works well with that). Different systems maybe (read conflicts).

    Search the FAQ in the forum. If you have problems uninstalling like i didn't have, your answer is there. I only had Sec. Center warning Comodo was disabled. Rebuilding the repository did the trick.

    BTW, saying the uninstaller is crappy and at the same time that you didn't try it, well...
     
  6. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    Hey Pedro!

    While 50-60 files being downloaded using uTorrent...

    About possible conflicts, the only thing I could think of was with SSM (as shown in my signature). Hence DLL Injections was the first one I disabled while attempting to resolve the CPU issue.

    I think what really did the trick to come down Comodo's CPU usage was this posted on the official forum suggested by Angelus:
    Source: http://forums.comodo.com/index.php?topic=6819.msg65735#msg65735
    Good criticism;)
     
  7. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    I use Emule, with at least 100 active (:D ) files to download. Obviously they're not downloading at the same time, but after a day of continuous usage it flies.
    Maybe that's it, it's Emule not Utorrent. Seing Angelus reply it does seem to indicate that it works differently/ needs something more.

    Also, SSM pro or free? It hooks almost every possible corner in Windows, but the freeware doesn't seem to conflict here. The pro however might. But with above, this doesn't seem to be the problem, Utorrent does.
     
  8. Mr. Malware

    Mr. Malware Registered Member

    Joined:
    Jan 22, 2007
    Posts:
    15
    I agree. All good reasons never to use Comodo Firewall.
     
  9. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello. :)

    There is no real difference. uTorrent uses one port for all incoming TCP and UDP. eMule uses 2, one for TCP and one for UDP. That shouldn't be of much importance.
    You are simply lucky Pedro, Comodo works for you & your config. But a well developed application must work on all configs with minimum trouble. That's why I didn't like Comodo v2, it smelled pretty "betish" to me...:)
     
  10. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    Me, is a massive eMuler myself. BitTorrent and eMule both a lot I use here :D As you guessed I too feel Comodo does not really have problem with eD2k but does with BitTorrent.
    Do you use BitTorrent a lot Pedro? If so how is the situation while a BT client is downloading a lot?

    SSM Pro my friend.
     
  11. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    It's your call :thumb:
    Emule works without inbound rules. You get a "low id", but it works. But i'm not refering to ports, i'm refering to "Direction: In/Out under the general tab and everything else was set to Any as they were by default , now under miscellaneous tab , check skip advanced security checks and allow invisible conntection attempts.". Bold is the most important thing i notice. I just answer prompts with Emule and CPU is down there, if to be found at all.
     
  12. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    I rarely use Bittorrent sorry. I got nothing :D

    SSM Pro should a different ball game. real time monitoring Registry et al, more hooks :p
     
  13. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello Pedro.

    So does torrent. I don't use emule, when I P2P I mainly do torrenting, but I remember (not with Comodo, with Jetico) that I got a high ID (KAD connected) in emule as long as I have one inbound rule for TCP port and one for UDP (presumably, they are also forwarded on router). Not sure about those emule settings though...

    Cheers
     
  14. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    I just queued 40 torrents on my uTorrent maxing out my bandwidth. I will report if CPU spike hits again. Right now is forgivable 2-25%. Hope nothing happens while I am asleep;)
     
  15. Hyperion

    Hyperion Registered Member

    Joined:
    Sep 29, 2003
    Posts:
    302
    May i give my own reccomendations about CPU friendly firewalls for p2p?Of course no fancy leak test champions.

    1)AShampoo Free (beware though,it can conflict with other security applications).0% CPU
    2)Kerio 2 (But i think it cuts somewhat down the connections.I think i had read it can't handle well more than 100 connections at one time).0% CPU
    3)Any combination that includes Ghostwall and another application.I have tried Ghostwall + SSMPro (for filtering outbound),Ghostwall + AppDefend 1 Beta,Ghostwall + Winpooch (rules only for the net),which gives you a firewall-like granular control with excellent results.You also get top browsing speed and max p2p speed.0% CPU
    4)ZA Pro (the free isn't Emule friendly,blocks UDP since forever and never bothered to fix it).It does OK,even though takes more CPU (0-2%),but on high dl speeds browsing becomes visibly slow and there is a system lag.
     
  16. Joliet Jake

    Joliet Jake Registered Member

    Joined:
    Mar 1, 2005
    Posts:
    911
    Location:
    Scotland
    Oh dear, sorry to report that I have none of the problems mentioned above using µTorrent with Comodo firewall. CPU never goes above 1 or 2%.
     
  17. Escalader

    Escalader Registered Member

    Joined:
    Dec 12, 2005
    Posts:
    3,710
    Location:
    Land of the Mooses
    There is some FUD going around that P2P users are being "tracked" by the anti-p2P' firms and uncertainty about Comodo's role in that.

    here is some stuff I posted over there but still haven't got a clear answer nor do I ever expect one. Don't care much as I don't use p2p but it adds to my block list!:cool: I checked the first entry and it is definitely not needed for CFW updates, since I blocked the whole range and updates attempts still complete properly.

    P2P IPs.txt(14150): Comodo-1:62.44.74.0-62.44.75.255, done in CFW

    WHOIS results for 62.44.74.0
    Generated by www.DNSstuff.com

    Location: United Kingdom [City: ]


    % This is the RIPE Whois query server #1.
    % The objects are in RPSL format.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/db/copyright.html

    % Information related to '62.44.74.0 - 62.44.74.255'

    inetnum: 62.44.74.0 - 62.44.74.255
    netname: UK-PIPEX-COMODO-1
    descr: Comodo-1
    country: GB
    admin-c: HM655-RIPE
    tech-c: HM655-RIPE
    status: ASSIGNED PA
    notify: *****@pipex.net
    mnt-by: AS5519-MNT
    mnt-lower: AS5519-MNT
    mnt-routes: AS5519-MNT
    changed: *****@pipex.net 20070302
    source: RIPE

    role: Hostmaster Contact
    address: Pipex Communications
    address: The Hinshelwood Building
    address: Edmund Halley Road
    address: Oxford Science Park
    address: Oxford
    address: OX4 4GB
    address: United Kingdom
    phone: +44 870 909 8181
    fax-no: +44 1865 778 160
    e-mail: *****@pipex.net
    admin-c: HM655-RIPE
    admin-c: ID40-RIPE
    admin-c: RIZ5-RIPE
    admin-c: SJC2-RIPE
    tech-c: SH1765-RIPE
    tech-c: RIZ5-RIPE
    tech-c: ID40-RIPE
    tech-c: HM655-RIPE
    tech-c: SJC2-RIPE
    tech-c: YSL1-RIPE
    nic-hdl: HM655-RIPE
    abuse-mailbox: *****@pipex.net
    notify: *****@pipex.net
    mnt-by: AS5519-MNT
    changed: ***@eng.pipex.net 20050809
    changed: *****@pipex.net 20050816
    changed: *****@pipex.net 20051018
    changed: *****@pipex.net 20051129
    changed: *****@pipex.net 20060302
    changed: ***@eng.pipex.net 20060504
    changed: ***@eng.pipex.net 20061012
    changed: ***@eng.pipex.net 20061212
    changed: *****@pipex.net 20070216
    changed: ***@eng.pipex.net 20070503
    source: RIPE

    % Information related to '62.44.74.0/24AS5413'

    route: 62.44.74.0/24
    descr: PIPEX Communications
    descr: (Serverbank)
    descr: Carlton House
    descr: 27A Carlton Drive
    descr: London
    descr: SW15 2BS
    descr: UK
    origin: AS5413
    member-of: AS5413:RS-PIPEX
    remarks:
    remarks: ------------------------------------------------------
    remarks:
    remarks: Please direct Abuse complaints to *****@pipex.net
    remarks: Complaints directed elsewhere will not be actioned.
    remarks:
    remarks: ------------------------------------------------------
    remarks:
    notify: *****@pipex.net
    mnt-by: AS5413-MNT
    changed: *****@pipex.net 20051108
    changed: ***@eng.pipex.net 20070305
    source: RIPE


    [The following lines added by www.dnsstuff.com per requirement by RIPE]
    This service is subject to the terms and conditions stated in the RIPE NCC Database Copyright Notice.
    Contact dnsstuff.com's 'info2@' address to report problems regarding the functionality of the service.





    P2P IPs.txt(53367): ComodoCALtd:72.20.6.52-72.20.6.63



    P2P IPs.txt(5336:cool:: ComodoCALtd:72.20.6.76-72.20.6.79
    P2P IPs.txt(69354): COMODO:81.187.75.116-81.187.75.116
    P2P IPs.txt(69356): COMODO:81.187.76.240-81.187.76.255
    P2P IPs.txt(69383): COMODO-RESEARCH-LAB:81.187.164.217-81.187.164.217
    P2P IPs.txt(69386): COMODO-RESEARCH-LAB:81.187.167.48-81.187.167.63
    P2P IPs.txt(71316): Comodo:82.109.38.200-82.109.38.207
    P2P IPs.txt(71466): COMODO Ltd:82.110.55.12-82.110.55.15
    P2P IPs.txt(79551): Comodo CA Ltd:85.91.228.128-85.91.228.191
    P2P IPs.txt(83306): COMODO-RESEARCH-LAB:90.155.91.64-90.155.91.95
    P2P IPs.txt(83715): Comodo Security Solutions Pvt Ltd:125.17.11.112-125.17.11.127
    P2P IPs.txt(125391): Comodo CA, Ltd:208.122.24.144-208.122.24.147
    P2P IPs.txt(132139): COMODO SYSTEM CO.,LTD:210.196.112.208-210.196.112.215
    P2P IPs.txt(14832:cool:: Usertrust / Comodo CA Ltd:216.126.201.16-216.126.201.191
     
  18. concerned807

    concerned807 Registered Member

    Joined:
    Dec 2, 2004
    Posts:
    68
    Self followup......

    After about 8-10 hour consecutive massive download using uTorrent, cfp.exe jumped to 75% CPU and my PC was slow as heck. As The Seer observed early, CPF does "engages in CPU utilization". Then it seems my uninstall is on the way....:(
     
  19. dave88

    dave88 Registered Member

    Joined:
    Feb 2, 2007
    Posts:
    177
    I recommend Sygate firewall for users doing massive filesharing activity, it handles hundreds of connections very well.


    Edit - Whoops, I didn't realize the post I was responding to was so old.
     
    Last edited: Jul 19, 2007
  20. Sxperm

    Sxperm Registered Member

    Joined:
    Sep 14, 2005
    Posts:
    42
    Comodo is bad for me also. I just uninstalled ZA Pro to test Comodo, as been awarded "best firewall" and found many issues.

    1. It stopped me from viewing webcam via MSN, even I set MSN as "trusted application" and all ports opened for this application.
    2. It not allowed me to use P2P sharing file, like bitcomet, which ZA Pro do not have this problem.
    3. It has conflicted with Proxy software like JAP, which ZA Pro do not have this problem at all.

    so I have dicided to turn back to ZA Pro since I cannot control everything Comodo doing.
     
  21. dwax

    dwax Registered Member

    Joined:
    Oct 21, 2002
    Posts:
    57
    Been trying to get rid of all the garbage that Comodo left in my PC too. I was trying to re install it but can't get rid of all the mess it left before. It was easier to go back to Zone Alarm. :(
     
  22. ccsito

    ccsito Registered Member

    Joined:
    Jul 27, 2006
    Posts:
    1,579
    Location:
    Nation's Capital
    Do you mean that reinstalling is a problem because you uninstalled it earlier? If so, then must be another example of sloppy programming. :mad:
     
  23. dwax

    dwax Registered Member

    Joined:
    Oct 21, 2002
    Posts:
    57
    Yep. i had to upgrade my Anti virus program. After I did that I used there info and uninstall tool and then went through the registry and deleted anything for CPF and installed. after rebooting it said I was not covered. tried it 3 times after 2 hours said enough is enough! These company's that leave this garbage in your PC after you uninstall are bad people. :mad: after submitting a trouble ticket,they want me to try other things. Wait..hold the horses! I am not a beta tester!
     
  24. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,695
    Hello,
    If you want good P2P throughput and zero system impact:
    Sygate - been running it for 5 years or so, downloading the entire Internet, plus online gaming, sometimes with 800 connections open, minimal cpu and memory impact, no lag.
    Mrk
     
  25. SystemJunkie

    SystemJunkie Resident Conspiracy Theorist

    Joined:
    Mar 3, 2006
    Posts:
    1,500
    Location:
    Germany
    Better for you, because comodo below alpha 3.x version makes a lot problems if using this, you only need to block one dll and you can´t surf anymore. That was the thing I never understand with versions 2.x. Just one dll was blocked and it was exactly like a total internet lock, no more surfing was possible.
     
Loading...
Thread Status:
Not open for further replies.