v 1.91 beta comments - F-Secure problem

[Rampe]

For some reason, my F-Secure has gone crazy with the new 1.9.1/952. It keeps asking permission to allow outbound connections every couple of minutes (most likely when the FTP-upload is running, 1 minute interval at the moment.). I keep allowing it with "remember this for the current program", but the outbound port is different every time, so F-Secure prompts for it all the time. Most likely it will stop when all ports have been used, but there's some still 65000 to go...
This hasn't happened before with any program (surely some want network access, but accepting it once is usually enough).

Any thoughts?

Edit: And it's not like it asks once every couple of minutes, it may ask even 10 times for permission in row. And everytime with different port.

[werribee_au]

You should be able edit/create a firewall rule for Cumulus that uses a port range/all ports etc

I am not familiar with F-Secure but a quick search found this.

Changing an existing Internet Shield firewall rule:
http://www.f-secure.com/kb/2275.

Also this:
Firewall rules can be configured for the F-Secure firewall.
However, this process is tedious because a user has to individually locate the .exe file and create a rule.
This cannot be done from the active connections list.
http://www.freeantivirushelp.com/blog/p ... nload.aspx

My suggestion would be to edit the rule that has been created for Cumulus and define a port range or all ports if you can.

Hope this helps

[Rampe]

Thanks for your suggestions werribee. I'm not too familiar with F-Secure, even though I have used it for some 5 years now. The reason for this is, that so far I didn't need to. Everything has worked fine, even Cumulus before the new version. I can (and have) allowed Cumulus inbound and outbound access, but I can't seem to find where to specify any ports for a named program. Surely I can open ports to the firewall, but it would allow anything and anyone through. I still think the problem is with Cumulus wanting to use every possible port available, in my case atleast.

[daj]

Without going into too much detail, FTP uses a number of ports. It establishes a connection to port 21 of the server and a return port back to your PC, usually on port 20. These are used as control and data connections. Your PC will also use an ephemeral (temporary) port number to complete these connections but you often do not need to worry about these.

All that aside, I wonder if Steve can comment on any change made to the FTP side of v1.9.1 which could affect your firewall, especially if Cumulus 1.9.0 was working.

If you turn off your firewall for a moment, does it work?

Out of interest, within Cumulus Internet settings do you have the "Use Active FTP mode" ticked or not?

[Rampe]

Without going into too much detail, FTP uses a number of ports. It establishes a connection to port 21 of the server and a return port back to your PC, usually on port 20. These are used as control and data connections. Your PC will also use an ephemeral (temporary) port number to complete these connections but you often do not need to worry about these.

All that aside, I wonder if Steve can comment on any change made to the FTP side of v1.9.1 which could affect your firewall, especially if Cumulus 1.9.0 was working.

If you turn off your firewall for a moment, does it work?

Out of interest, within Cumulus Internet settings do you have the "Use Active FTP mode" ticked or not?

Cumulus was in passive mode. I left the program running without FTP upload for the night, no prompts from F-Secure. Now I selected Active FTP, it's been running for some 10 minutes without prompts and the website is updating. Looks promising.

[werribee_au]

Cumulus was in passive mode. I left the program running without FTP upload for the night, no prompts from F-Secure. Now I selected Active FTP, it's been running for some 10 minutes without prompts and the website is updating. Looks promising.

Great news! Good suggestion Daj
Gerard

[steve]

I haven't made any changes to the ftp code in 1.9.1. But it's built with the new development environment, with new runtime code etc, so in effect everything that isn't Cumulus itself is new, all the underlying ftp code etc. It's not clear how anything could have changed that would have anything to do with this particular issue, however.