Comodo and svchost.exe leakage

[2maggie 1]

So, situation is:

1. hosts file updated with "46.105.19.36 airvpn.org"

2. Comodo Application rule for svchost.exe created - block out all TCP & UDP except 10.4.0.0-10.9.255.255

3. After machine restarting this rule blocking access to the network and internet from Ethernet adapter (TAP is not yet activated)

4. After attempt to connect getting message "AirVpn.org cannot be resolved" (???)

5. AirVPN client NOR Openvpn GUI cannot connect.

What can it be?

Thank you

[Staff 9973]

So, situation is:

1. hosts file updated with "46.105.19.36 airvpn.org"

2. Comodo Application rule for svchost.exe created - block out all TCP & UDP except 10.4.0.0-10.9.255.255

3. After machine restarting this rule blocking access to the network and internet from Ethernet adapter (TAP is not yet activated)

4. After attempt to connect getting message "AirVpn.org cannot be resolved" (???)

5. AirVPN client NOR Openvpn GUI cannot connect.

What can it be?

Thank you

Hello!

Please activate that rule only after the connection to a VPN server. Switch to global rules in order to be able to connect without having to turn on and off rules.

Kind regards

[2maggie 1]

"Switch from global rules" means remove the svchost.exe application rule and put exactly the same rule (Block TCP Or UDP Out From IP Not In [10.4.0.0 - 10.9.255.255] in the Global Rule section?

How to connect the Global Rule without turning it on and off? If its on its on, off its off - please correct me if I'm wrong.

thank you

[2maggie 1]

Dear Admin,

I have read your topic and have a little suggestion: what if you can modify the "service status" screen to include current IP addresses? This may help to quickly check if Global Rules has an actual NN#.

[Staff 9973]

Dear Admin,

I have read your topic and have a little suggestion: what if you can modify the "service status" screen to include current IP addresses? This may help to quickly check if Global Rules has an actual NN#.

Hello!

Sure, thank you for the suggestion. You can already see them from the source code of the page, anyway for your and other readers comfort you can see them in the configuration files, at the line "remote". You can generate all the configuration files in one shot with our configuration generator.

We don't publish the entry-IP addresses list publicly in plain-text to mitigate DDoS botnets attacks.

Kind regards