Comodo blocking port forwarding

Comodo blocking port forwarding

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Comodo blocking port forwarding fred fleagle 03-31-2008
Posted by Poutnik on April 5, 2008, 7:25 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>
> And Comodo is worse, since it doesn't even allow proper configuration even
> in the most simple scenarios.

As I have said, it is on your hands.

My comodo works fine even at complex scenarios.
But it can be out of your knowledge scope.

Posted by Mr. Arnold on April 5, 2008, 9:04 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>
>>
>> And Comodo is worse, since it doesn't even allow proper configuration
>> even
>> in the most simple scenarios.
>
> As I have said, it is on your hands.
>
> My comodo works fine even at complex scenarios.
> But it can be out of your knowledge scope.

Your first mistake is that some 3rd party personal firewall you're even
calling a FW. It's not a FW at best it's a machine level packet filter and
some won't even call it that.

A FW separates two networks. A FW sits at the junction point between two
networks. A FW protects from the network it's protecting from usually the
Internet, and it protects the network it's protecting the LAN. A FW must
have two network interfaces or in the case of a FW running on a secured
gateway computer, the computer must have two NIC(s). One network interface
must face the WAN/Internet, and the other one must face the LAN.

Because of the FW ability to segment networks, it reduces the risk of damage
spreading from one network to another network, like a firewall or firedoor.


Posted by Sebastian G. on April 5, 2008, 9:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Mr. Arnold wrote:


> Your first mistake is that some 3rd party personal firewall you're even
> calling a FW. It's not a FW at best it's a machine level packet filter and
> some won't even call it that.


The latter would be idiots, since it is one, albeit a lousy one.

> A FW separates two networks. A FW sits at the junction point between two
> networks. A FW protects from the network it's protecting from usually the
> Internet, and it protects the network it's protecting the LAN. A FW must
> have two network interfaces or in the case of a FW running on a secured
> gateway computer, the computer must have two NIC(s). One network interface
> must face the WAN/Internet, and the other one must face the LAN.


And the inability of Comodo to implement a routing firewall, which is the
minimal strictly isolating firewall concept in scenarios where bridging
firewalls are not applicable, is what makes it not a firewall.

But: he hasn't claimed it to be a firewall. He only wrote that a firewall is
only as good as its ruleset, and the same obviously also applies to pure
host-based packet filters.

Posted by Mr. Arnold on April 5, 2008, 11:51 am
If you were  Registered and logged in, you could reply and use other advanced thread options

> Mr. Arnold wrote:
>
>
>> Your first mistake is that some 3rd party personal firewall you're even
>> calling a FW. It's not a FW at best it's a machine level packet filter
>> and some won't even call it that.
>
>
> The latter would be idiots, since it is one, albeit a lousy one.

What they call it is crap, but that was not the exact word.


Posted by Poutnik on April 6, 2008, 3:41 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
I do not need to learn what the hardware FWs are
and how they are supposed to work.

According to the fact
Comodo is personal software firewall,
I stayed at this topic.

We can debate, if Pers SW FWs are proper term, but it is commonly used.
And modern PSW are much more then plain packet filters.
PF have no more chance against sofisticated malware.

SW FW can be more easily compromized,
but on the other hand, the have more chances
to detect application hijacking
and suspicious interprocess comunication.

This field is closed to distant HW firewalls.

HW and SW FWs have little different goals, purpose and usage.
There is no use for their users fight each other.
They have common enemy.

>
> >
> >>
> >> And Comodo is worse, since it doesn't even allow proper configuration
> >> even
> >> in the most simple scenarios.
> >
> > As I have said, it is on your hands.
> >
> > My comodo works fine even at complex scenarios.
> > But it can be out of your knowledge scope.
>
> Your first mistake is that some 3rd party personal firewall you're even
> calling a FW. It's not a FW at best it's a machine level packet filter and
> some won't even call it that.
>
> A FW separates two networks. A FW sits at the junction point between two
> networks. A FW protects from the network it's protecting from usually the
> Internet, and it protects the network it's protecting the LAN. A FW must
> have two network interfaces or in the case of a FW running on a secured
> gateway computer, the computer must have two NIC(s). One network interface
> must face the WAN/Internet, and the other one must face the LAN.
>
> Because of the FW ability to segment networks, it reduces the risk of damage
> spreading from one network to another network, like a firewall or firedoor.
>
>

Similar ThreadsPosted
iptables port forwarding - port is filtered, needs to be open March 11, 2005, 4:15 pm
Why is port forwarding more secure than opening up a port? December 16, 2004, 1:03 pm
port forwarding/ opening port November 2, 2005, 11:03 am
ssh and vnc port forwarding March 11, 2005, 9:11 pm
pix + port forwarding September 26, 2005, 3:34 pm
Port forwarding... December 16, 2007, 3:25 pm
How safe is port forwarding? July 16, 2004, 6:46 pm
Port forwarding on a speedtouch 510? August 6, 2004, 2:30 am
Port Forwarding - The Risks? December 20, 2004, 12:35 am
port forwarding problem March 8, 2005, 2:29 pm

The site map in XML format XML site map

Contact Us | Privacy Policy