Private IP addresses within the same local network must be unique. Private (internal) IP addresses aren't routed on the Internet, they never leave the local network, and no traffic can be exchanged using private IP addresses. Other IP ranges, usually those starting with 10.x.x.x, are within the private IP address range. The number of public IP addresses is far greater than the number of private ones because every network on the Internet must have a unique public IP.Īll public IP addresses belong to one of the following public IP address ranges: Alternatively, use the ip command for an extended range of capabilities compared to ifconfig. The Zone inself do nothing,is not a rule is just a Zone,for help you to make yours rules.For Linux users, follow our tutorial to obtain your IP address using the hostname or ifconfig command, or via the GUI. Not exactly, in clear you say ok i allow when source Zone( your computer network) is “Access”,but i deny when source Zone(your computer network) is “Deny”,and if you want you can make another rule for specific application that say ok i allow when source Zone(your computer network) is “Deny”,but i deny when source Zone(your computer network) is “Access”. For the specific app, these settings should be equivelent to a trusted app when on the “Access” network, and a blocked app when on the “Deny” network (named zone in Comodo) right?
#MY IP HIDE AND WINDOWS FIREWALL WINDOWS#
One thing is I’m seeing a lot of logged Windows Operating System notices. Acces : IP 192.168.1.0 / 255.255.255.0 and Deny : IP 128.84.44.0 / 255.255.252.0Īfter for your application you edit the rule with :ġ/ Allow “source IP” is Zone “Acces”,destination IP is All, direction is Out, your specific ports if you wantĢ/ Allow “source IP” is All,destination IP is Zone “Acces”, direction is IN, your specific ports if you wantģ/Block “source IP” is Zone “Deny”,destination IP is All, direction is OutĤ/Block “source IP” is All,destination IP is Zone “Deny”, direction is In Of course, with dynamic IPs, I don’t always get those IPs, but I will from within the range.Ĭreate yours Networks Zones ,give them a name ,ex. To clarify, I want to allow access if my computers IP is 192.168.1.100, but block access to that app if my computers IP is 128.84.47.140 for instance. Would that then allow the application unrestricted access if on the first network, but block ALL access if on the second? So with the first, if my network is 192.168.1.0 / 255.255.255.0 I should allow connections there, but I can say for ?source? if my IP is 128.84.44.0 / 255.255.252.0 I can say block? Specifically, I want it automatic so that I cannot forget, because leaving open shares on untrusted networks and such is very dangerous. Hmm, well if I could load a configuration from the command line/ via a scripted API, that would be OK. You should create a Wish in the wishlist section here: To Quickly Change Configurations You can Right click the icon in the taskbar > Configuration > “Select the Configuration You wish to load” (To Create a Configuration You’ll edit the policy as you wish and then go to CIS > Misc > Manage my Configurations > Export / Save) then you can save as many configurations you wish.) So Like Once You Are At Home You’ll Load the “Home Configuration”Īnd Once you go to Starbucks You’ll load the “Public/Start bucks Configuration” You could also create # of configuration files for starbucks/home/McDonalds etc… Starbucks / McDonalds etc etc)įor Incoming: You’ll Make the source to be “Network Zone” then choose the network zone you want (Ex.
> Editįor Outgoing: You’ll make the Destination to be “Network Zone” then choose the network zone you want (Ex.
Go to CIS > Firewall > Advance > Network Security Policy > select the program that you want to edit. Make sure you have the network(s) you want in the “My Network Zones” (Make sure you are in Custom Policy Mode Before Doing This) Allow Port 45 from “starbucks” to Port 44 192.xx.x.xx Allow All Out Going Connections If In Network “Starbucks”Įx. Summary: Create Rules For Each ApplicationĮx. I’m sorry if the following information is incorrect (To some point) but I’m saying this by memory (I don’t have CIS in front of me as we speak)
0 kommentar(er)
