Comodo CIS Bug fix policy

[simmerskool]

Windows firewall is disabled here, Win 11 Home. I just checked. It tells me Win firewall is disabled. Comodo firewall active.

interesting, I run win10 and IIRC CF left WF enabled.

 

[Chuck57]

OKay, looks like it was windows security that turned off Win firewall. The exact wording, "Windows firewall is off because you are using other providers." That must have begun in Win 11. It never happened before. I don't feel like digging into Win 11 security to try and turn the firewall on.

 

[Behold Eck]

If the latest version is like the past, you won't have problems. It played nice with win firewall in years past.

Yeah it used to take me some time before disabling WF after installing CFW in the past so that`s why I have no qualms really about enabling it.

Regards Eck

 

[bazang]

CS Solid and Non intrusive protection? CS setting leaves that IPv6 door wide open...

IPv6 has about double the attack surface (AS) and is more prone to design and implementation security weaknesses - in other words human error.

With IPv6 your global routable public IP Address is not obfuscated by NAT.

It is prudent to use only IPv4 for the next ten or twenty years. To allow even more time for security issues to be resolved or solved.

 

[Pico]

Thank you for the info.
IPv6 may have more security defects than IPv4 I believe that but it is not good that Comodo CIS does not filter IPv6 at all per default setting and it's also no good that CS setting does not enable IPv6 filtering and leaves IPv6 traffic totally unmonitored / unprotected going in and out on all systems running Comodo CIS.

 

[rashmi]

Thank you for the info.
IPv6 may have more security defects than IPv4 I believe that but it is not good that Comodo CIS does not filter IPv6 at all per default setting and it's also no good that CS setting does not enable IPv6 filtering and leaves IPv6 traffic totally unmonitored / unprotected going in and out on all systems running Comodo CIS.

I've turned on IPv6 filtering in CF. Are you saying CF 2025 doesn't filter IPv6 even with the IPv6 filtering setting on?

 

[bazang]

Thank you for the info.
IPv6 may have more security defects than IPv4 I believe that but it is not good that Comodo CIS does not filter IPv6 at all per default setting and it's also no good that CS setting does not enable IPv6 filtering and leaves IPv6 traffic totally unmonitored / unprotected going in and out on all systems running Comodo CIS.

CIS\CFW supports IPv6 since version 5 (released in 2011).

A user that does not have native IPv6, but instead 6to4 then IPv6 filtering will not work.

I have seen it mentioned that CIS\CFW does not filter IPv6 mentioned a few times here at MT. There is a long process of troubleshooting to diagnose the issues. For the vast majority of reports of failed IPv6 filtering it is either Comodo misconfiguration or the network does not support native IPv6, but instead uses 6to4.

It could also be a bug.

 

[bazang]

I've turned on IPv6 filtering in CF. Are you saying CF 2025 doesn't filter IPv6 even with the IPv6 filtering setting on?

Create IPv6 address block rule for Google DNS:

2001:4860:4860::8888
2001:4860:4860::8844

Then attempt to ping those IPv6 addresses. If working correctly then you will observe a "PING: transmit failed. General failure." Google DNS is configured to return an ICMP Reply to the ICMP Request from PING. An IPv6 block rule in CIS\CFW should prevent any application, process or service running on the system from being able to send an ICMP Request to the configured blocked IPv6 address.

Trivia: PING = Packet Internet Groper

 

[Pico]

It doesn't work with a fresh Comodo CIS install using default settings connected to a native IPv6 network and not even when one applies CS settings.

 

[bazang]

It doesn't work with a fresh Comodo CIS install using default settings connected to a native IPv6 network and not even when one applies CS settings.

IPv6 filtering is not enabled by default. It must be configured manually.

Without using a VPN or proxy and IPv6 enabled for the system network adapter if the network supports IPv6 then when you run the tests on this page all 10 out of 10 tests will be successful.

Test your IPv6.

This will test your browser and connection for IPv6 readiness, as well as show you your current IPv4 and IPv6 address.

test-ipv6.com

Using a VPN or proxy might block IPv6.

 

[rashmi]

IPv6 filtering is not enabled by default. It must be configured manually.

Without using a VPN or proxy and IPv6 enabled for the system network adapter if the network supports IPv6 then when you run the tests on this page all 10 out of 10 tests will be successful.

Test your IPv6.

This will test your browser and connection for IPv6 readiness, as well as show you your current IPv4 and IPv6 address.

test-ipv6.com

Using a VPN or proxy might block IPv6.

I switched ISPs a year ago, and my new one offers native IPv6. It seems like they prioritize IPv6, with IPv4 as a backup. CF has IPv6 filtering enabled, and its outbound connection details display both IPv6 and IPv4 connections for browsers and apps. The test on test-ipv6.com received a perfect 10/10 score.

This is my current CF configuration.
Configuration: Proactive Security
Firewall Settings: Safe Mode. Enabled: Do not show popup alerts - Block Requests. Enabled: Filter IPv6 traffic
Firewall Tasks: Stealth Ports: Block Incoming Connections
Containment Settings: Disabled: Do not virtualize access to the specified files/folders. Disabled: Enable automatic startup for services installed in the container
Auto-Containment: All Applications-Unrecognized Rule: Action - Block
File Rating Settings: Enabled: Enable Cloud Lookup. Disabled: Analyze unknown files in the cloud by uploading them for instant analysis. Disabled: Upload metadata of unknown files to the cloud
HIPS: Disabled
VirusScope: Disabled
Website Filtering: Disabled

 

[Pico]

IPv6 filtering is not enabled by default. It must be configured manually.

True, but many if not all novice Comodo CIS users (and even some experts) just install Comodo CIS with only default settings or apply CS settings and leave all other settings alone / untouched and forget about enabling IPv6 filtering.
It's still not good that Comodo CIS doesn't enable this IPv6 filtering during or after install time when it detects a native IPv6 network and leaves this door wide open, talking about security...

 

[Behold Eck]

True, but many if not all novice Comodo CIS users (and even some experts) just install Comodo CIS with only default settings or apply CS settings and leave all other settings alone / untouched and forget about enabling IPv6 filtering.
It's still not good that Comodo CIS doesn't enable this IPv6 filtering during or after install time when it detects a native IPv6 network and leaves this door wide open, talking about security...

I`m sure CS will address this in a future video but aren`t most web sites still using IPV4 ?

Regards Eck

 

[Pico]

CS is aware of the disabled setting yet she does not enable it.
Why does she not enable it???
That's a very big mystery...

 

[Decopi]

The IPv6 issue is not only a matter of default or not default, enabled or disabled... IPv6 in Comodo is a bug that has existed for more than 7 years, it has been reported countless times, it has never been fixed (as usual), and enabled/disabled due to the bug the IPv6 filtering doesn't work properly.

It is just another bug, among more than ±500 unfixed bugs (listed in the links of Comodo's official forum), of which Comodo acknowledged at least 40 bugs last July... ±500 bugs that the (irresponsible and immoral) fanatics keep ignoring, omitting or minimizing by saying that “it's nothing, bugs are not dangerous nor harmful, all Comodo bugs are good, useful, convenient, nice" blah blah blah blah).

PS: The IPv6 issue is dangerous, but there are many other bugs in Comodo that are much more dangerous!

 

[SeaKelp]

This is a similar situation. "Experts" have said Jeeps today are riddled with various problems and Jeeps rate very low on the reliability scale. Those reports and findings worry a lot of people who go far off paved roads into really rough country. As a result, sales are down.

However, there are people who ignore the reports. They have Jeeps and take them into very rough country, and have no problems of any kind. I will believe those using the Jeeps over what Consumer Reports says. Those owners use the Jeep, beat it up, and they find that mechanically their Jeeps work fine and the issues are minor or nonexistent.

So, I'll trust Cruelsister, who has used, tested, and hammered Comodo Firewall with every malware she can find through the years, over someone who is less familiar with it.

"So, I'll trust Cruelsister, who has used, tested, and hammered Comodo Firewall with every malware she can find through the years, over someone who is less familiar with it."

That's been my experience using the standalone firewall with her settings: zero problems on a number of computers. Her numerous videos are self evident.

 

[SeaKelp]

This is a similar situation. "Experts" have said Jeeps today are riddled with various problems and Jeeps rate very low on the reliability scale. Those reports and findings worry a lot of people who go far off paved roads into really rough country. As a result, sales are down.

However, there are people who ignore the reports. They have Jeeps and take them into very rough country, and have no problems of any kind. I will believe those using the Jeeps over what Consumer Reports says. Those owners use the Jeep, beat it up, and they find that mechanically their Jeeps work fine and the issues are minor or nonexistent.

So, I'll trust Cruelsister, who has used, tested, and hammered Comodo Firewall with every malware she can find through the years, over someone who is less familiar with it.

What Fools These Mortals Be...

I have a question if you don't mind. I started using Comodo years ago based on reading at the time the Government couldn't circumvent it. After stumbling upon your videos a few years back and looking further into it I used Comodo firewall with your settings along with a subscription antivirus as it fit my needs. Out of curiosity, malware aside, how good does it firewall?

 

[simmerskool]

... Comodo firewall with your settings along with a subscription antivirus as it fit my needs. Out of curiosity, malware aside, how good does it firewall?

Depends who responds to your question

 

[Chuck57]

I have a question if you don't mind. I started using Comodo years ago based on reading at the time the Government couldn't circumvent it. After stumbling upon your videos a few years back and looking further into it I used Comodo firewall with your settings along with a subscription antivirus as it fit my needs. Out of curiosity, malware aside, how good does it firewall?

I'd say very good. There are self described 'experts' here who will say otherwise. You've watched the videos. They tell you more than this or that person's opinion.

 

[Pico]

I have a question if you don't mind. I started using Comodo years ago based on reading at the time the Government couldn't circumvent it. After stumbling upon your videos a few years back and looking further into it I used Comodo firewall with your settings along with a subscription antivirus as it fit my needs. Out of curiosity, malware aside, how good does it firewall?

Let CS explain why she doesn't enable IPv6 filtering and recommends to leave it off...................