Comodo Firewall 与 Emule 的”沟通”方法


自从换了Comodo Firewall之后我的Emule就像短路了一样, 过程中不断与Ed2k Server断链, 而且永远都处于Low ID状态, 因为使用的是Xtreme Mod版本, Low ID对于我来说始终是一个煎熬.

不过Comodo Firewall确实是一款很好、很和谐、很强大的墙. 只是它的设置确实有时候会让人摸不着头脑.

这里给出一个方法(PS: 不保证绝对有效, 方法综合了官方论坛上和一些Google到的, 我的Emule固定使用网络环境为Cable 1.5M + Comodo Firewall 3.x + Nvidia nForce Networking Controller)

首先到Firewall -> Advanced -> Network Security Policy选项里点选Global Rules标签栏并建立如下规则:

    Action: Allow
    Protocol: TCP
    Direction: In
    Description: Rule for incoming TCP connections
    Source Address: Any
    Destination Address: Any
    Source Port: A Port Range (Start: 1025 - End: 65535)
    Destination Port: A Single Port (这里填写你的Emule TCP端口号)

    Action: Allow
    Protocol: UDP
    Direction: In
    Description: Rule for incoming UDP connections
    Source Address: Any
    Destination Address: Any
    Source Port: A Port Range (Start: 1025 - End: 65535)
    Destination Port: A Single Port (这里填写你的Emule UDP端口号)

    Action: Allow
    Protocol: TCP or UDP
    Direction: Out
    Description: Rule for outgoing TCP and UDP connections
    Source Address: Any
    Destination Address: Any
    Source Port: A Port Range (Start: 1025 - End: 65535)
    Destination Port: A Port Range (Start: 1025 - End: 65535)

    Action: Allow
    Protocol: ICMP
    Direction: Out
    Description: Ping the server (edk network)Source Address: Any
    Destination Address: Any
    ICMP Details: Message (Icmp Echo Request)
    这条规则是确保ed2k服务器的更新不被防火墙拦截

    上面便是Global Rules所需要设置的, 设置好记得保存应用(废话!)…接下来转移到Network Security Policy选项里的Application Rules标签栏, 找到Emule客户端的Application name(一般都是Emule.exe), 双击打开Application Network Access Control面板, 在Network Access Rules栏选择Use a Custom Policy项, 在Copy From中依次选择Predefined Security Policies -> Trusted Application. 此后规则栏里便会自动添加一条“Allow All Incoming and Qutgoing Requests”的规则. 然后点击下面的Add…按钮添加如下两条规则:

    Action: Ask (勾选Log as a firewall event if this rule is fired)
    Protocol: TCP
    Direction: Out
    Description: Rule for HTTP requests
    Source Address: Any
    Destination Address: Any
    Source Port: A Port Range (Start: 1025 - End: 65535)
    Destination Port: A Single Port (Port: 80)

    Action: Block (勾选Log as a firewall event if this rule is fired)
    Protocol: IP
    Direction: In/Out
    Description: Block and Log All Unmatching Requests
    Source Address: Any
    Destination Address: Any
    IP Details: IP (ANY)

    经过以上设置后, 你的Emule客户端应该可以处在High ID连接状态了. 记得去Miscellaneous选项栏点击Manage My Configurations -> Export导出你的设置备份, 因为每次Comodo升级都会复位整个Firewall的设置, 升级后再导入就可以了.

    如果你的Comodo在使用Defense+模块只要在Defense+ -> Advenced -> Computer Security Policy 下面将Emule客户端程序(一般为Emule.exe)在Use a Predefined Policy栏设置为Trusted Application就可以了…(不过这个模块个人感觉有点多余)

这里只是我个人所消化的心得, 如果你使用Emule过程中有同样的问题欢迎与我交流…