第九部分 防火墙预设规则

Comodo Firewall 可以预先设置一些常用规则模板，然后具体程序可以直接套用，以减少操作。
比如：IE、Firefox、Opera、Maxthon等用Web Browser 。
电驴用 eMule。。。

我的防火墙预设规则如下：

Web Browser  浏览器


Allow Outgoing HTTP Requests  
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is HTTP Ports]
Allow Outgoing FTP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 21]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


Email Client 邮件客户端


Allow Outgoing POP3/SMTP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is In [POP3/SMTP Ports]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Ask All the Remaining Requests


FTP Client  FTP客户端


Allow Outgoing Passive FTP  Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535] 
Allow Outgoing FTP Connetion Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 21]
Allow Incoming FTP-DATA Requests
Allow TCP In From IP Any To IP Any Where Source Port Is 20 And Destination Port Is In [Dynamic Ports 1025-65535]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


Trusted Application  信任程序


Allow All Incoming and Outgoing Requests


Blocked Application  阻止程序


Block All Incoming and Outgoing Requests


Outgoing Only  只允许连出


Allow Outgoing TCP or UDP Requests
Block and Log All Unmatching Requests


Opera   


Allow Outgoing TCP Requests
[Allow TCP Out From IP Any To In Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is Any]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


eMule


Allow Incoming TCP Requests
[Allow TCP In From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [eMule 监听端口]]
Allow Incoming UDP Requests
[Allow UDP In From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [eMule 监听端口]]
Allow Outgoing TCP and UDP Requests
[Allow TCP OR UDP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Ping the ED2K Servers Requests
[Allow ICMP Out From IP Any to IP Any Where ICMP Message Is ECHO REQUEST]
Allow and Log Outgoing HTTP Requests
[Allow And Log TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


BT


Allow Incoming TCP and UDP Requests
[Allow TCP OR UDP In From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [BT 监听端口]]
Allow Outgoing TCP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing UDP Requests
[Allow UDP Out From IP Any To IP Any Where Source Port Is In [BT 监听端口] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing HTTP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80-83]
Allow Outgoing Ping Requests
[Allow ICMP Out From IP Any to IP Any Where ICMP Message Is ECHO REQUEST]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


P2P  使用随机端口的P2P软件


Allow Incoming TCP or UDP Requests
[Allow TCP OR UDP In From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing TCP and UDP Requests
[Allow TCP OR UDP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing HTTP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80-83]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


Thunder  迅雷


Allow Incoming TCP and UDP Requests
[Allow TCP OR UDP In From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [迅雷 监听端口]]
Allow Outgoing TCP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing UDP Requests
[Allow UDP Out From IP Any To IP Any Where Source Port Is In [迅雷 监听端口] And Destination Port Is In [Dynamic Ports 1025-65535]]
Allow Outgoing Thunder Ports Requests
[Allow TCP OR UDP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-65535 And Destination Port Is In [Thunder Ports]]
Allow Outgoing HTTP Requests
[Allow TCP Out From IP Any To IP Any Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80-83]
Allow Outgoing Ping Requests
[Allow ICMP Out From IP Any to IP Any Where ICMP Message Is ECHO REQUEST]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Allow Access to Loopback Zone
[Allow IP Out From IP Any To In [Loopback Zone] Where Protocol Is Any]
Block and Log All Unmatching Requests


LAN  局域网


Allow IP In From In [Local Area Network] To IP Any Where Protocol Is Any
Allow IP Out From IP Any To In [Local Area Network] Where Protocol Is Any
Allow IP Out From IP Any To In [Special & Local Multicast] Where Protocol Is Any
Block and Log All Unmatching Requests


LAN & Outgoing  局域网和允许连出


Allow IP In From In [Local Area Network] To IP Any Where Protocol Is Any
Allow IP Out From IP Any To In [Local Area Network] Where Protocol Is Any
Allow IP Out From IP Any To In [Special & Local Multicast] Where Protocol Is Any
Allow TCP OR UDP Outgoing Requests
[Allow TCP OR UDP Out From IP Any To IP Any Where Source Port Is Any And Destination Port Is Any]
Block and Log All Unmatching Requests


规则都很注释清楚了，在弹出对话框Treat As ... ， 选择同类适合的规则即可。

有几个特殊程序，再讲一下：
System
LAN(局域网) 或 完全阻止(无局域网)

Windows Updater/Svchost
LAN(局域网) 或 Outgoing Only(无局域网)

%windir%\explorer.exe


Allow IP In From In [Local Area Network] To IP Any Where Protocol Is Any
Allow IP Out From IP Any To In [Local Area Network] Where Protocol Is Any
Allow IP Out From IP Any To In [Special & Local Multicast] Where Protocol Is Any
Allow HTTP Outgoing crl.microsoft.com Requests
[Allow TCP Out From IP Any To crl.microsoft.com Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 80]
Allow Outgoing DNS Requests
[Allow UDP Out From IP Any To In [OpenDNS] Where Source Port Is In [Dynamic Ports 1025-5000] And Destination Port Is 53]
Block and Log All Unmatching Requests




上传了 Global Rules 和 Predefined Rules ， 导入以后，必须自己调整才能使用，仅供参考！
导入方法：
备份原有规则
Disable Defense+ ， 退出Comodo
双击导入
重新启动Comodo，恢复Defense+ 原来模式。

--------------------------------------------------------------------------------------------------

欢迎关注我的微博 http://weibo.com/pco18   

                                                                       您的顶帖是我发帖的动力↘