Reply to thread

Message

<blockquote data-quote="Decopi" data-source="post: 1101294" data-attributes="member: 67091">Comodo has several modules. Every module is expected to have a specific function. It&#039;s not valid to justify firewall design flaws but saying: &quot;the firewall has no problems because the malware is running in containment&quot;.Comodo firewall by default automatically uses &quot;safe&quot; rules, which means that Windows Services files, svchost and another hundreds of files, all of them will have free comms. And that&#039;s the problem! It&#039;s not a bug. It&#039;s a design flaw.Regardless of whether a file is sandboxed or not, there are two problems here:<ol>
<li data-xf-list-type="ol">Windows Services files, svchost and hundreds of other files can&#039;t be customized at Comodo firewall</li>
<li data-xf-list-type="ol">The Comodo &quot;safe&quot; list of whitelisted files... is a time-bomb.</li>
</ol>PS: Please, allow me two questions:&nbsp; &nbsp; &nbsp;&nbsp; a. Hypothetically, if everything is solved by sandboxing/containerizing stuff, then why firewall is needed at all?&nbsp; &nbsp; &nbsp;&nbsp; b. If containment fails (and that already happened many times in the past), then how Comodo firewall will block virus/malware?</blockquote>

[QUOTE="Decopi, post: 1101294, member: 67091"] Comodo has several modules. Every module is expected to have a specific function. It's not valid to justify firewall design flaws but saying: "the firewall has no problems because the malware is running in containment". Comodo firewall by default automatically uses "safe" rules, which means that Windows Services files, svchost and another hundreds of files, all of them will have free comms. And that's the problem! It's not a bug. It's a design flaw. Regardless of whether a file is sandboxed or not, there are two problems here: [LIST=1] [*]Windows Services files, svchost and hundreds of other files can't be customized at Comodo firewall [*]The Comodo "safe" list of whitelisted files... is a time-bomb. [/LIST] PS: Please, allow me two questions: a. Hypothetically, if everything is solved by sandboxing/containerizing stuff, then why firewall is needed at all? b. If containment fails (and that already happened many times in the past), then how Comodo firewall will block virus/malware? [/QUOTE]

Verification