No internet connectivity when phorm.com is blocked (split from monster phorm thread)

[Morden]

Check services and see if there are any there called comodo or similar and disable them.

R/C my computer/manage/services and appications/services and you will get a list of all services that start with windows. R/C and change start up settings.

You could also try process explorer to identify what comodo runs :-

http://www.microsoft.com/technet/sys...sExplorer.mspx

[atsa2]

I remember that I did try starting in safe mode, with exactly the same result - could get on network and get IP address, but unable to get out with IE or Firefox. When I shut Comodo down I did it from the systray icon. The same thing happened on several networks, but I am unable to check anything as it is all gone... I have re-installed, so might try later to repeat and investigate further.
Thanks for the replies so far.

[Chrysalis]

is comodo designed to use hostnames in blocking rules? typically when configuring firewalls you always should use ip addresses and not dns names.

[SMHarman]

All this other testing of telnet etc does not use port 80. Only port 80 traffic is intercepted by the L7 switch.

[tdadyslexia]

Originally Posted by Paul M

That is blocking way more than phorms 3 ip addresses, not a very good idea.

Just block 88.208.250.85, 207.44.186.90 & 88.208.250.66

88.208.250.85 rezolvs to RIPE Network Coordination Centre, so why would you want to block them?