Security: Support 3rd party firewall software

Security: Support 3rd party firewall software

[properly]

On Windows, wireguard is not obeying Comodo Firewall because wireguard
wintun network adapter is not including comodo's driver.

Note that this problem doesn't occur on OpenVPN's network adapter (V9)
because it loads comodo driver.


1. Disable Windows Firewall on Win10
2. Install Comodo Firewall(CF)
3. Configure CF
4. Acknoledge that the CF is filtering packet as expected

5. Install Wireguard
6. Connect to WG
7. All packets runs through WG, and comodo can't filter them


This is severe security risk.
Using Windows firewall is not an answer here.
There are many people who bought third party software solution.

Re: Security: Support 3rd party firewall software

[Matthias Urlichs]

[-- Attachment #1.1: Type: text/plain, Size: 679 bytes --]

On 27.09.20 01:24, properly@secmail.pro wrote:
> This is severe security risk.

Yeah, but the Windows Firewall does manage to block WG packets, doesn't it?

Thus IMHO the security problem is on Comodo's side as they obviously
don't use the same system interface as the Windows firewall. It's their
job to intercept every packet, not Wireguard's to special-case feeding
the data to them.

Forcing each driver to load some 3rd-party tool if it happens to be
installed is not a viable solution. Nice of OpenVPN to work with Comodo,
but what if Domoco creates a competing product and then Mocodo comes
along and … you get the picture.

-- 
-- Matthias Urlichs



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]