PDA

View Full Version : PC Flank tests Kerio 2.1.5


normishmael
September 24th, 2008, 02:48 PM
I just completed the below PC Flank tests with my new instal of Kerio 2.1.5:
PC Flank Leaktest NEW!
Quick Test
Stealth Test
Browser Test
Trojans Test
Advanced Port Scanner
Exploits
All of them were "pass" The stealth test comes a "pass" with no firewall active at all,(ISP blocking Ports?)

I supose I am asking is PC Flank reliable,or do I need to try other tests.
I doubt hoary old Kerio will pass the "hyper-BuckRogers-injection" test's
Comodo and OnLine Armour shed like water off a ducks back,but is passing the above (the firewall related) tests indication for pretty good security?

Sorry to show my ignorance but I need to know.

Thanks

Fajo
September 24th, 2008, 03:21 PM
Your as safe as a test can make you. ;)

normishmael
September 24th, 2008, 03:42 PM
mighty fine.

Stem
September 24th, 2008, 03:51 PM
-{ Quote: "All of them were "pass" The stealth test comes a "pass" with no firewall active at all,(ISP blocking Ports?)" }-

My first question would be "are you behind a router".

Some ISP will block some inbound ports but personally see it at minimal (mine restricts port 445).

Note:- Some tests are made against the browser, so some settings such as allowing/blocking referrers within the browser can affect results.


- Stem

normishmael
September 24th, 2008, 04:42 PM
Stem:
no,just DSL connection and software firewall.
no router.

Stem
September 24th, 2008, 04:55 PM
normishmael,

-{ Quote: "
no,just DSL connection and software firewall.
no router." }-

It will then depend on your windows setup. ( is windows firewall still active?). Without a firewall then services active will show.

normishmael
September 24th, 2008, 05:13 PM
Stem:
Windows Firewall is turned off.

Kerodo
September 24th, 2008, 08:41 PM
As far as inbound goes, the only remaining rational conclusion is that your modem has a router of sorts built-in.

As for outbound or other exploit type tests, Kerio probably won't pass any of that stuff very well. Not sure exactly what is being tested though, and whether inbound or out.

I never trusted PCFlank nor considered it reliable. Every time I tested inbound on various firewalls a few years back, grc.com showed stealth, while PCFlank always gave random various bogus results claiming closed and even a few open port statuses... So I concluded long ago, that PCFlank was nonsense.... Perhaps it has improved since then, I have no idea....

vijayind
September 24th, 2008, 10:04 PM
Hi normishmael,
Since you are using a DSL connection, I think you will be having a DSL modem/CPE. The DSL CPE also acts as a router (in most ISP configs).

Please check your user manual for CPE or ask your ISP, for details about logging in and configuring your DSL modem.
For example: a Netopia DSL CPE has IP: 192.168.1.254 and username/password as admin/admin.

Once you have those details, login into the CPE and check the WAN interface. If its in bridged mode, then its a transparent device. Hence the open ports are on your system and not the CPE.
If its in any other mode (other than bridged mode), then CPE is acting as a router. Check if your CPE has a basic firewall and functionality to block/open ports. Then configure the same.

normishmael
September 24th, 2008, 10:38 PM
Kerodo & Vijayind:
Thanks for the advice.
I will get with Embraq or whatever Sprint is called now about the modem.
Something about PCFlank just seemed a little glib or something...

Kerodo
September 24th, 2008, 10:46 PM
-{ Quote: "Kerodo & Vijayind:
Thanks for the advice.
I will get with Embraq or whatever Sprint is called now about the modem.
Something about PCFlank just seemed a little glib or something..." }-
Good luck Normishmael, I think Vijayind hit the nail on the head.......

vijayind
September 25th, 2008, 05:42 AM
-{ Quote: "Kerodo & Vijayind:
Thanks for the advice.
I will get with Embraq or whatever Sprint is called now about the modem.
Something about PCFlank just seemed a little glib or something..." }-
Glad to be of any possible assistance. If you have any queries or issues, please feel free to get back on the forum.