Using third party firewall instead of Windows Firewall

Discussion in 'other firewalls' started by Melita, Nov 21, 2020.

  1. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,501
    Location:
    Paris
    Hi Ming!- I also have noticed a Comodo FW block of MsMpEng.exe (Antimalware Service Executable) and have no clue as to why this occurs. It can be easily resolved (if you wish to do so) via the main GUI (click Network Intrusions, look for msmpeng.exe, right click and Allow).

    As for the 3 alternatives you mention, doing a (really) quick and dirty evaluation of a product one can use three different methods of connecting out- an unsigned browser (Seamonkey), a freshly coded python keylogger (using "import socket"), and some ransomware or other that needs to call home (like Ishtar) will yield sub-optimal results.

    (Love Australia! Had to give a couple of lectures a few years back in Adelaide. You guys are nuts!)

     
  2. Ming33

    Ming33 Registered Member

    Joined:
    Apr 23, 2021
    Posts:
    4
    Location:
    Aus
    Cheers Sister! Saves me allot of trial and error. The you tube videos spoiled us but have noticed they slowed down...
    Will have a look at your suggestion re msmpend.exe. Thanks for the quick check and reply.


    (yeah Adelaide is a nice and quiet place to live)
     
  3. Ming33

    Ming33 Registered Member

    Joined:
    Apr 23, 2021
    Posts:
    4
    Location:
    Aus
    Hi , I have uninstalled comodo. Scanned it with Zemana, defender. I have set up comodo firewall as per the cruel way and as you can see it blocks Windows processes. Unless I am doing something wrong. The issue is if I set up "grandma's pc" on the other side of the world it can create massive issues. So question is like the defender.exe. is this another file one should unblock? Thanks
     

    Attached Files:

  4. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,501
    Location:
    Paris
    As long as there is nothing listed in the "Unrecognized Files" section (on the GUI) just click unblock to override the Firewall warning. Also note that nothing is being blocked per se- it is only outbound connections by whatever Windows item it trying to connect out (kinda like O&O ShutUp).
     
    Last edited: Apr 29, 2021
  5. Ming33

    Ming33 Registered Member

    Joined:
    Apr 23, 2021
    Posts:
    4
    Location:
    Aus
    Thanks sister that makes sense. I have further noted it blocks elements of Teamviewer, Microsoft as well and Comodo itself. I think for an advanced user sitting in front of his own pc this strict firewall rules is manageable, however I think it will create allot of issues for "grandma" if it blocks a legit process and or one has to remotely administer the PC. Unless less restrictive rules can be set re sandboxing but I am not that experienced.
     

    Attached Files:

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.