COMODO防火墙安简规则 for V5

aben1217

回复 610楼 lorchid 的帖子

没有DNS地址啊！用那个用户名跟密码上网的！

lorchid

回复 611楼 aben1217 的帖子

cmd下ipconfig /all查看

cxj669932

毛豆 表示很有压力，不太会用！！！

大猫熊

楼主，我现在又遇到一个问题，不知道如何解决，想请教一下。
我是校园网，是原生支持IPV6的，我现在开启防火墙就不能上ipv6.google.com，如果关闭就可以，我想应该是设置和规则方面的问题，但我不太会排除。我把日志部分贴在下面，详细的附上。谢谢！

部分日志：

Date	Application	Action	Direction	Protocol	Source IP	Source Port	Destination IP	Destination Port
2011-01-15 00:00:00	C:\Windows\System32\svchost.exe	Allowed	Out	UDP	fe80::dd0c:123d:ab83:8ff2	546	ff02::1:2	547
2011-01-15 00:00:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:00:30	Windows Operating System	Blocked	In	UDP	169.254.26.50	5353	224.0.0.251	5353
2011-01-15 00:00:32	Windows Operating System	Blocked	In	UDP	169.254.26.50	5353	224.0.0.251	5353
2011-01-15 00:01:03	C:\Windows\System32\svchost.exe	Allowed	Out	UDP	fe80::dd0c:123d:ab83:8ff2	546	ff02::1:2	547
2011-01-15 00:01:21	System	Allowed	Out	UDP	203.188.84.232	137	144.214.5.21	137
2011-01-15 00:01:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:02:03	System	Allowed	Out	UDP	203.188.84.232	138	203.188.255.255	138
2011-01-15 00:02:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:03:11	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:15	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:19	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:23	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:03:38	System	Allowed	Out	UDP	203.188.84.232	137	144.214.5.21	137
2011-01-15 00:03:49	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:53	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:03:57	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:04:01	Windows Operating System	Blocked	Out	IPV6	203.188.84.232		144.214.160.4
2011-01-15 00:04:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:05:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:05:38	System	Allowed	Out	UDP	203.188.84.232	137	144.214.5.21	137
2011-01-15 00:06:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:07:07	C:\Windows\System32\svchost.exe	Allowed	Out	UDP	fe80::dd0c:123d:ab83:8ff2	546	ff02::1:2	547
2011-01-15 00:07:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:07:38	System	Allowed	Out	UDP	203.188.84.232	137	144.214.5.21	137
2011-01-15 00:08:10	C:\Windows\System32\svchost.exe	Allowed	Out	UDP	fe80::dd0c:123d:ab83:8ff2	546	ff02::1:2	547
2011-01-15 00:08:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:09:25	Windows Operating System	Blocked	In	IGMP	203.188.84.251		224.0.0.1
2011-01-15 00:09:38	System	Allowed	Out	UDP	203.188.84.232	137	144.214.5.21	137
2011-01-15 00:09:45	Windows Operating System	Blocked	Out	ICMPV6	fe80::dd0c:123d:ab83:8ff2		fe80::2999:41bf:2c98:d0
2011-01-15 00:09:47	Windows Operating System	Blocked	Out	ICMPV6	fe80::dd0c:123d:ab83:8ff2		fe80::1ce9:c39c:aff3:dd9f
2011-01-15 00:09:48	Windows Operating System	Blocked	Out	ICMPV6	fe80::dd0c:123d:ab83:8ff2		fe80::e4e2:a11:be0e:ba4a
2011-01-15 00:09:50	Windows Operating System	Blocked	Out	ICMPV6	fe80::dd0c:123d:ab83:8ff2		fe80::a1d5:52ed:59e1:c763
2011-01-15 00:09:51	Windows Operating System	Blocked	Out	ICMPV6	fe80::dd0c:123d:ab83:8ff2		fe80::fd8b:1d17:89b1:b554

所有日志如下：




谢谢帮助！！

alfrend1991

不错。。。。十分详细。。。。值得参考。。。

Kagami

回复 614楼 sandyyangjie 的帖子

ipv6很多地方与ipv4不一样，5.3版本的comodo升级日志中表明添加了对ipv6的支持。
对于日志中的情况按如下方法操作就可以了：
1、全局规则中在[A3]下添加两条规则：
（1）允许ip 出/入 协议自定义41；
（2）允许ip出 协议自定义58；
2、svchost套用允许外连（全部）。

大猫熊

Kagami 发表于 2011-1-16 14:28
回复 614楼 sandyyangjie 的帖子

ipv6很多地方与ipv4不一样，5.3版本的comodo升级日志中表明添加了对ipv ...

谢谢！我用了这个方法后，浏览器还是上不了ipv6.google.com，于是我又设置了predefined policy，把浏览器那一项里加入了允许ip出 协议自定义58这条，就可以访问了。这样安全上没有问题吧？

Kagami

回复 617楼 sandyyangjie 的帖子

允许ip 出/入 协议自定义41这条可能有点松，不用p2p类工具时只允许出就行了；
协议58就是ipv6下的ICMP协议（ICMPv6），允许出没有安全上的问题。
要想详细设置还是得comodo提供支持才行

大猫熊

Kagami 发表于 2011-1-16 15:04
回复 617楼 sandyyangjie 的帖子

允许ip 出/入 协议自定义41这条可能有点松，不用p2p类工具时只允许出就行 ...

好的～明白了～～多谢帮助！

病毒是神马

好贴 留名~！