OpenArena Message Boards

OpenArena Contributions => Development => Topic started by: ThomasR on September 07, 2007, 02:11:34 PM



Title: COMODO Personal Firewall: "Fake or Malformed UDP Packet"
Post by: ThomasR on September 07, 2007, 02:11:34 PM
Hi there!

I just tried to host a 1on1 against a friend, but although I opened port 27960, I soon noticed that the COMODO Personal Firewall didn't allow him in - the securty log showed several "High Severity" events with the following details:

Quote
Description: Blocked by Protocol Analysis (Fake or Malformed UDP Packet)
Direction: UDP Outgoing
Source: XXX.XXX.XXX.XXX:27960
Destination: XXX.XXX.XXX.XXX:55215
Reason: UDP packet length and the size on the wire (1316 bytes) do not match

Do you have any idea what is causing this? When I disable the protocol analysis module of the firewall, the connection works just fine, so it looks like it must be OA having an issue. It might be just a setting - but it also might be a bug, that's why I posted it here, in "Development".


Title: Re: COMODO Personal Firewall: "Fake or Malformed UDP Packet"
Post by: sago007 on September 07, 2007, 02:50:07 PM
It appears to be a common problem for COMODO firewall it is not limited to Open Arena.

http://forums.comodo.com/help/netgear_network_storage_is_blocked-t9329.0.html

Looks like they recommended that you turn the function off.

EDIT:
Also it would be an engine problem and out of our scope.


Title: Re: COMODO Personal Firewall: "Fake or Malformed UDP Packet"
Post by: next_ghost on September 07, 2007, 05:40:30 PM
If COMODO firewall really detects actual length of Ethernet packets (not the length written in packet header) to be 2084 bytes and identifies total of 743 packets sent over 28 seconds from 4 compuers as a DDoS attack, I'd suggest uninstalling it immediately and installing a firewall which is not horribly broken.


Title: Re: COMODO Personal Firewall: "Fake or Malformed UDP Packet"
Post by: De@thByBl@st on September 07, 2007, 09:02:18 PM
COMODO ,COMMODE, too much similarity there and from what I'm reading a COMMODE would be a better firewall.