Page 1 of 1

Great free firewall

Posted: Tue Jun 27, 2006 9:07 pm
by YeOldeStonecat
I've mentioned it a few times...but never really got into it

Comodo

http://www.personalfirewall.comodo.com/

Supported..(unlike most of the other free ones which have stopped development/support after being bought out).

Matter of fact, version 2 was recently released.

Several writeups have shown it to perform very well in leak tests, and stealthing.

A little naggy when you first install it..asking this and that, like most software firewalls. But it does have a large database of "safe" programs..and if you have it scan your system for install software first..it cuts down on those first several days of nagginess.

Default settings are fine, and you can roll up your sleeves and get really advanced with it too.

Posted: Tue Jun 27, 2006 9:35 pm
by mnosteele52
Hey YOSC they have a nice list of freebies, have you tried their anti-virus or anti-spam? Also, how much RAM does the firewall use?

:thumb: :D

Posted: Tue Jun 27, 2006 10:20 pm
by YeOldeStonecat
Haven't tried their AV or spam filter..but going to try their backup utility.

Comodo hovered between 25 - 29 megs on a fresh install (I don't know if that goes up much once it "learns" your system and builds up the ruleset), that system was a 512 megger, 1.2 GHz rig.

I'd seen it mentioned a few times over at Wilders..seems to be liked by the few who know about it.

Posted: Tue Jun 27, 2006 11:35 pm
by Shinobi
YeOldeStonecat wrote:I've mentioned it a few times...but never really got into it

Comodo

http://www.personalfirewall.comodo.com/

Supported..(unlike most of the other free ones which have stopped development/support after being bought out).

Matter of fact, version 2 was recently released.

Several writeups have shown it to perform very well in leak tests, and stealthing.

A little naggy when you first install it..asking this and that, like most software firewalls. But it does have a large database of "safe" programs..and if you have it scan your system for install software first..it cuts down on those first several days of nagginess.

Default settings are fine, and you can roll up your sleeves and get really advanced with it too.
Thanks Yosc.. i'll check it out.. :thumb:

Posted: Wed Jun 28, 2006 7:34 am
by YARDofSTUF
I'll have to try this on a buddy's PC.

Posted: Fri Apr 13, 2007 8:33 pm
by KoRnGtL15
Its a very good firewall. I had ZoneAlarm free version and uninstalled it. I went Comodo and havent looked back since. Also it isnt a resource hog like ZA. Comodo is a lightweight!

Posted: Sat Apr 14, 2007 1:46 am
by trogers
Not good for my torrent downloads.

It has only 3 settings to choose - Block all, Custom and Allow all.

At Custom, it has no options to port forward, and even though I have identified my torrent client as a trusted application, more than half of incoming packets from peers get blocked off and a 30-40% rise in consumption of CPU load by its process "cpf".

I have to set Comodo to Allow all when I run torrents to avoid this problem.

Posted: Sun Apr 15, 2007 1:03 pm
by YARDofSTUF
trogers wrote:Not good for my torrent downloads.

It has only 3 settings to choose - Block all, Custom and Allow all.

At Custom, it has no options to port forward, and even though I have identified my torrent client as a trusted application, more than half of incoming packets from peers get blocked off and a 30-40% rise in consumption of CPU load by its process "cpf".

I have to set Comodo to Allow all when I run torrents to avoid this problem.
http://www.wilderssecurity.com/showthread.php?t=145704

Starting at Post #4.

Posted: Sun Apr 15, 2007 11:15 pm
by trogers
YARDofSTUF wrote:http://www.wilderssecurity.com/showthread.php?t=145704

Starting at Post #4.
Thanks for the link, YoS.

Followed the post but had to add an additional network control rule:

Allow ICMP in - any source - destination LAN IP of comp - criteria where ICMP message is any.

Note: this is allowed in only and not out as you do not want your comp to send out responses to ICMP pings of probes.

Posted: Mon Apr 16, 2007 12:00 am
by YARDofSTUF
So with those additions it works fine now? I've recommended Comodo a bunch of times, lol.

Posted: Mon Apr 16, 2007 12:11 am
by trogers
YARDofSTUF wrote:So with those additions it works fine now? I've recommended Comodo a bunch of times, lol.
I am still testing. Presently finishing a few slow torrents so would not know if I can achieve max speed with well-seeded ones till later.

Made adjustments to network control rules and observed the activity logs and that is how I found out the need to allow in ICMP pings as well.

Will let you know in a few days after testing the settings.

Network Control Rules in Comodo for Torrent Clients

Posted: Wed Apr 18, 2007 8:10 am
by trogers
YARDofSTUF wrote:http://www.wilderssecurity.com/showthread.php?t=145704

Starting at Post #4.
Hi, YoS

Here is the latest outcome of my testing.

I had to add the following Network Control Rules to get BitComet version 0.86 to work through Comodo personal Firewall:

1. Allow In TCP or UDP to a Port Range (Listening Forward Port same as the one used in the router)

2. Allow all ICMP pings for both In and Out

3. Allow In TCP or UDP to Destination Port 80

With these additional network control rules, My torrents can download normally under the 'Custom' setting.

Posted: Wed Apr 18, 2007 10:31 am
by YARDofSTUF
Cool, thanks for the experiment and results, Mr. T :)

Posted: Thu May 03, 2007 3:03 pm
by Room101
Comodo also has a truly excellent forum. No flames, no jerks, just people who are exceptionally generous in their willingness to help (well, maybe it's not pure generosity, as I think a couple of them work for Comodo).

other precautions

Posted: Wed May 23, 2007 8:06 am
by raviyatnalkar
what are the other precautions i ve to keep in mind while using this???
like windows firewall have to be turned off while using this one... please direct...

Posted: Wed May 23, 2007 12:05 pm
by YARDofSTUF
raviyatnalkar wrote:what are the other precautions i ve to keep in mind while using this???
like windows firewall have to be turned off while using this one... please direct...
Ya you really only need comodo.

Posted: Tue Jun 19, 2007 9:21 am
by caveman
Sygate (even tho it`s Symantec now) Personal Firewall is the one for me!

7.5 - 8MB usage and next to no CPU

Never looked back after binning ZA

Posted: Fri Jun 22, 2007 2:32 pm
by jeremyboycool
Any thoughts on their back-up and anti virus?

Posted: Fri Jun 22, 2007 2:43 pm
by YARDofSTUF
jeremyboycool wrote:Any thoughts on their back-up and anti virus?
Havent seen any comparasions with it included.

Posted: Fri Jun 22, 2007 6:05 pm
by mnosteele52
jeremyboycool wrote:Any thoughts on their back-up and anti virus?
Backup seems to be OK, but Cobian Backup is better. Anti-virus sucks.

:)

Posted: Fri Jun 22, 2007 6:51 pm
by jeremyboycool
Cool cool. I'll check out Cobian. I already uninstalled the Comodo anit virus, AVG seemed to do a better job.

Posted: Sat Jun 23, 2007 5:13 am
by YARDofSTUF
jeremyboycool wrote:Cool cool. I'll check out Cobian. I already uninstalled the Comodo anit virus, AVG seemed to do a better job.
Active Virus Sheild is the good freebie.

Posted: Mon Jun 25, 2007 1:50 am
by jeremyboycool
YARDofSTUF wrote:Active Virus Sheild is the good freebie.

:)

Thanks!

Blocking Ports in Comodo

Posted: Mon Jul 09, 2007 2:18 pm
by jjstrade
Thanks for the tip on Comodo. It appears to be a great program.

I found speedguide.net when I realized that Port 8080 was wide open. Comodo helpd me to block (or filter it) with a rule. I haven't done a complete scan... yet. Researching other vulnerable ports.