Jump to content

Setting up Comodo Firewall


Darren-7

Recommended Posts

The guide we have is different from the one at Comodo's forums.

http://forum.utorrent.com/viewtopic.php?pid=292343#p292343

[pre] [RULE 1]

Action ............ : Allow

Protocol .......... : UDP

Direction ......... : Out

Description ....... : DNS Service

Source Address .... : Any

Destination Address : Any

Source Port ....... : Any

Destination Port .. : (A Single Port) 53

[RULE 2]

Action ............ : Allow

Protocol .......... : UDP

Direction ......... : Out

Description ....... : Multicast

Source Address .... : Any

Destination Address : (IP Range) 239.0.0.0 - 239.255.255.255

Source Port ....... : Any

Destination Port .. : (A Single Port) 6771

[RULE 3]

Action ............ : Allow

Protocol .......... : UDP

Direction ......... : In

Description ....... : Ephemeral Ports [iN] (UDP)

Source Address .... : Any

Destination Address : Any

Source Port ....... : Any

Destination Port .. : (A Port Range) 1024 - 5000

[RULE 4]

Action ............ : Allow

Protocol .......... : TCP or UDP

Direction ......... : Out

Description ....... : Ephemeral Ports [OUT] (TCP/UDP)

Source Address .... : Any

Destination Address : Any

Source Port ....... : (A Port Range) 1024 - 5000

Destination Port .. : Any

[RULE 5]

Action ............ : Allow

Protocol .......... : TCP or UDP

Direction ......... : In

Description ....... : Port [YOUR PORT] [iN] (TCP/UDP)

Source Address .... : Any

Destination Address : Any

Source Port ....... : Any

Destination Port .. : (A Single Port) [YOUR PORT]

[RULE 6]

Action ............ : Allow

Protocol .......... : UDP

Direction ......... : Out

Description ....... : Port [YOUR PORT] [OUT] (UDP)

Source Address .... : Any

Destination Address : Any

Source Port ....... : (A Single Port) [YOUR PORT]

Destination Port .. : Any

-----------------------------------------------------------

Where [YOUR PORT] is replaced with the port µTorrent listens on. These rules can be made global rules, but you're probably better off making them application-specific.

In COMODO Firewall Pro v2.x:

- Application-specific rules can be added via Security > Application Monitor

- Global rules can be added via Security > Network Monitor

In COMODO Firewall Pro v3.0:

- Application-specific rules can be added via Firewall > Advanced > Network Security Policy > Application Rules

- Global rules can be added via Firewall > Advanced > Network Security Policy > Global Rules

[/pre]

http://forums.comodo.com/frequently_asked_questions_faq_for_comodo_firewall/tutorial_for_utorrent_with_comodo_firewall_3-t15677.0.html

[pre]1. Go to : Firewall -> Advanced -> Attack Detection Settings -> Miscellanous and disable Do Protocol analysis

2. Go to : Firewall -> Advanced -> Predifined Firewall Policies and select Add...

Give a name at the new Predefined Policy for example: utorrent

Add the following rules:

Rule 1

Action = Allow

Protocol = TCP or UDP

Direction = In

Description = Rule for incoming TCP and UDP connections

Source Address = Any

Destination Address = Any

Source port = A port range = (start port = 1025 / end port = 65535)

Destination port = the port of utorrent

Rule 2

Action = Allow

Protocol = TCP

Direction = Out

Description = Rule for outgoing TCP connections

Source Address = Any

Destination Address = Any

Source port = A port range = (start port = 1025 / end port = 65535)

Destination port = A port range = (start port = 1025 / end port = 65535)

Rule 3

Action = Allow

Protocol = UDP

Direction = Out

Description = Rule for outgoing UDP connections

Source Address = Any

Destination Address = Any

Source port = the port of utorrent

Destination port = A port range = (start port = 1025 / end port = 65535)

Rule 4

Action = Ask (enable Log as a firewall event if this rule is fired)

Protocol = TCP

Direction = Out

Description = Rule for HTTP requests

Source Address = Any

Destination Address = Any

Source port = A port range = (start port = 1025 / end port = 65535)

Destination port = 80

Rule 5

Action = Block (enable Log as a firewall event if this rule is fired)

Protocol = IP

Direction = In/OUT

Description = Block and Log All Unmatching Requests

Source Address = Any

Destination Address = Any

IP Details = Any

3. Start utorrent. When Comodo asks you with a popup, choose Treat this application as select utorrent and enable Remember my answer.

[/pre]

Which one to choose?

I have Comodo Firewall 3.8.65951.477 / uTorrent 1.8.2 / Vista SP1 32 / behind a router.

Link to comment
Share on other sites

At a quick glance the Comodo forum rules aren't as good as Ultima's. They would still block some µTorrent functionality while allowing more then µTorrent needs in other cases (although this won't be a security risk).

If you don't want to go for Ultima's strict but expansive ruleset you could simply go for making µTorrent a Trusted Application.

@moogly: iirc that will work because:

Rule 1 isn't blocked by Comodo by default.

Rule 2 is for Local Peer Discovery, which isn't required or even commonly used.

Rule 5 is for incoming connections, while it isn't required it is strongly recommended.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...