Pages: [1]
  Print  
Author Topic: COMODO Personal Firewall: "Fake or Malformed UDP Packet"  (Read 6805 times)
ThomasR
THIS ONE POST HERE SHOULD DO IT.


Cakes 0
Posts: 1


« on: September 07, 2007, 02:11:34 PM »

Hi there!

I just tried to host a 1on1 against a friend, but although I opened port 27960, I soon noticed that the COMODO Personal Firewall didn't allow him in - the securty log showed several "High Severity" events with the following details:

Quote
Description: Blocked by Protocol Analysis (Fake or Malformed UDP Packet)
Direction: UDP Outgoing
Source: XXX.XXX.XXX.XXX:27960
Destination: XXX.XXX.XXX.XXX:55215
Reason: UDP packet length and the size on the wire (1316 bytes) do not match

Do you have any idea what is causing this? When I disable the protocol analysis module of the firewall, the connection works just fine, so it looks like it must be OA having an issue. It might be just a setting - but it also might be a bug, that's why I posted it here, in "Development".
« Last Edit: September 07, 2007, 02:13:09 PM by ThomasR » Logged
sago007
Posts a lot
*

Cakes 62
Posts: 1664


Open Arena Developer


WWW
« Reply #1 on: September 07, 2007, 02:50:07 PM »

It appears to be a common problem for COMODO firewall it is not limited to Open Arena.

http://forums.comodo.com/help/netgear_network_storage_is_blocked-t9329.0.html

Looks like they recommended that you turn the function off.

EDIT:
Also it would be an engine problem and out of our scope.
« Last Edit: September 12, 2007, 01:24:53 AM by sago007 » Logged

There are nothing offending in my posts.
next_ghost
Half-Nub


Cakes 0
Posts: 76


« Reply #2 on: September 07, 2007, 05:40:30 PM »

If COMODO firewall really detects actual length of Ethernet packets (not the length written in packet header) to be 2084 bytes and identifies total of 743 packets sent over 28 seconds from 4 compuers as a DDoS attack, I'd suggest uninstalling it immediately and installing a firewall which is not horribly broken.
« Last Edit: September 07, 2007, 05:45:25 PM by next_ghost » Logged
De@thByBl@st
Half-Nub


Cakes 0
Posts: 67


« Reply #3 on: September 07, 2007, 09:02:18 PM »

COMODO ,COMMODE, too much similarity there and from what I'm reading a COMMODE would be a better firewall.
Logged
Pages: [1]
  Print  
 
Jump to: