firewall leak tester website : NEW Look

[gkweb]

Hi,


to moderators : i apologize if it isn't the right place for such post, feel free of course to move it if needed.


my website http://firewallleaktester.webhop.net has been reworked graphically by a friend who is known under the nickname IBAS.
I really thanks him to have done such hard work and i hope you will like the new look !

The forum link is gone and instead is a new page, empty for now, but which will have the link to the upcoming paper about firewalls and leaktests.
Outpost results has been updated, statistics will be as soon i will have 100 answer in this poll http://www.wilderssecurity.com/showthread.php?t=17688


If you find any dead link or glitches, please inform me.

The upcoming paper should coming soon... keep an eye open ;)

[hayc59]

gkweb, Hello
Just sent you an e-mail.
let me know what you think...... :)

[halcyon]

Great to see you are updating.

Any chances of new firewall tests? Quite a few of the programs have gotten an update (Outpost is at 2.1 now, supposedly with many fixes, etc.)

Also, there are interesting "other" firewalls like Visnetic/8signs, etc.

Are you still planning to do more tests and update that page?

Thank you for your efforts so far and keep up the good work!

[gkweb]

thanks you ;)

About updates, i can't add any firewall of the web for many reasons :
First, firewalls you have just quoted are only packet filter (like Visnetic) and are meant to work on a server, not a personal computer, and so don't have outbound application filtering.
Second, i have just added most famous personal firewalls to provide a quick overview to readers, but the website is before all done for you can download leaktests and do tests yourself (with eventually firewalls not tested).
Third, there is firewalls including sandboxe and relying only on this to block leaktests, but because leaktests are tested with such features disabled, those kind of security suite would fail most leaktests.

I know few firewalls have now new build, and version and build tested are written purposefully to not mislead readers, i do tests on my spare time, and tests ask a lot of time so i can't update results at each new build (moreover some new build _often_ doesn't change anything regarding leaktests, i think to past kerio versions or ZA, only major update can).

So i do my best to do tests, but now, more than before, to explain in details how i do tests, what are my criteria and why, exactly what will be adressed in my upcoming paper about all of that, is what matters most to my eyes. I was recently more focused to the explanation than to add a ton of tests that people disagree anyway without knowing criteria.
I try however to do all that eveyone wants, tests plus explanations plus site updates plus more... but it's hard to do all at once, and to make leaktests too :)

Keep on eye on it, as soon as i will can i will update the most important first (major firewall updates, after, minor build updates).
It's hard to answer to everyone will, but i'll try ;)

[Paul Wilders]

Thumb up, gkweb! It's a hugh improvement for sure 8)

regards.

paul

[Pilli]

Nice job GK! ;D

[gkweb]

Thanks you Paul and Pilli :)

i'm sure my friend who has made the new site will like compliments ;)

EDIT : if more people could poll to the poll linked in my first post... ty.

[optigrab]

GKWeb

Please enlighten me (if that is possible). How is it that Outpost pro's results on the "Highest Setting" table (8/22) is much worse than the "Out of the box" table (13/22).

Is it possible these are inadvertantly reversed?

Respectfully
Optigrab

[gkweb]

I forgot to write 4/10 on "out of the box" settings, thx for notice it (because it is out of the box but with disabling a makeshift, i forgot it).
Anyway, these are results for 2.0.238 version, not the 2.1

EDIT : i have tested quickly the 2.1 which seems at least to pass
more leaktests like PCAuditv2, but i can't be sure yet, need more investigation.

[Aggressor]

Hey gk ;

Actually, I preferred your previous site ;D

Don't want 2 spoil your day - just a matter of personal taste, that's all; IMVHO, I think the background color is too bright - personally, I favour dark, if possible BLACK backgrounds, which are easier on the eye & give far less headaches... 8)


But the effort was commendable though!

[gkweb]

np Morgoth, it's impossible to please everyone when it comes to colours and graphics ;)
This make me remember a post where Kaspersky AV dev (or vendor) was saying that some people prefer the old GUI version, some other the new beta GUI...

Fortunaly that we have all a different personal opinion, if not, the world would be sad :)
(everyone agree with everyone, it scared me!)

[Phant0m]

Hey gkweb

Outstanding website, luv the improvements, luv the visual!

Take it from me gkweb, it is IMPOSSIBLE to please everyone. The best we can do is try to please the majority, and from the looks of things you did just that! ;)

[CrazyM]

Hi gkweb

-{ Quote: " quoting: gkweb link=board=23;threadid=22427;start=0#msg133725 date=1077310775]to moderators : i apologize if it isn't the right place for such post, feel free of course to move it if needed." }-

This is the right spot, so no worries there.

Great job and effort on your part. Keep up the good work.

Regards,

CrazyM

[Red_Dwarf]

;D New look to site is better, looks more professional.

Yeah in Mozzila and in FireFox site looks great.
In IE works as well but ahh well we all know differant browser look slightly differant .

Only comment is FRA link...

Well done to you and IBAS

Red Dwarf

[gkweb]

Yea i know in IE the website looks not as good as with FireFox, but i won't try to fix such tiny issue, and in a way, FireFox's users are rewarded to use a better browser ;) (don't want to start a troll ! ::))

If anyone has suggestions and ideas to improve it, i'm open, but i don't get out rabbits from a hat :)

EDIT : surprising stats !!

[illukka]

links to this site should be pinned at every security forum!

great site ;D

have you ever considered testing these firewalls against real live nasties instead of leaktests?

i don't think the stats are that surprising: your site is obviously visited mostly by security conscious people, and security conscious ppl use mozilla/ other alternative browser...

edit:da¤¤ typos

[gkweb]

thanks you :)

about mozilla and your opinion, yea i think you are right, mozilla rocks ;)

[gkweb]

results page updated, take a look too to the news page, something to follow...

Outpost 2.1 is better than 2.0.x and score same as ZA.

[JayK]

Interesting to see the stats of wilder's security.

[Paul Wilders]

-{ Quote: " quoting: JayK link=board=23;threadid=22427;start=15#msg134818 date=1077550540]
Interesting to see the stats of wilder's security.
" }-

Interesting indeed - and we don't have any problem with that ;).

regards.

paul

[JayK]

-{ Quote: " quoting: Paul Wilders link=board=23;threadid=22427;start=15#msg134822 date=1077550686]
-{ Quote: " quoting: JayK link=board=23;threadid=22427;start=15#msg134818 date=1077550540]
Interesting to see the stats of wilder's security.
" }-

Interesting indeed - and we don't have any problem with that ;).

regards.

paul
" }-

Of course, I mean from the web logs kept by Wilder's security. Just a summary of course of the user agent string.

[gkweb]

I should not use this post for every "news" i add to my website, but the last news could interest many firewalls users :

http://perso.wanadoo.fr/jugesoftware/firewallleaktester/eng/news.htm

I already know that Look'n'Stop is very responsive about leaktests, but now i can add Outpost too.

Happy to see more firewalls vendors concerned by leaktests :)

[Paul Wilders]

-{ Quote: " quoting: gkweb link=board=23;threadid=22427;start=15#msg135245 date=1077634178]
I should not use this post for every "news" i add to my website" }-

That's quite alright, gkweb ;)

-{ Quote: "I already know that Look'n'Stop is very responsive about leaktests, but know i can add Outpost too." }-

Mikhail Zakhryapin is surely doing his upmost in regard to OP - and a very nice person as well ;)

regards.

paul

[gkweb]

It's name is "Mikhail Fedorov" in my mails, may be there is different "Mikhail" to Agnitum ? ::)

Ok now, until very important requests, time to let this thread down into the forum ;)

Thanks to Wilder forums to have let me post the news here :)

[hayc59]

thanks Paul... *puppy*

[Paul Wilders]

gkweb,

-{ Quote: "It's name is "Mikhail Fedorov" in my mails, may be there is different "Mikhail" to Agnitum ?" }-

There is: I'm referring to the CEO from Agnitum ;)

-{ Quote: "Thanks to Wilder forums to have let me post the news here" }-

Our pleasure.

hayc,

"Once and OP addict - hooked forever"? ;)

regards.

paul

[MegaHertz]

Hello all,

Hope no one minds, but thought I would clarify the "Mikhail's". :)

Mikhail Zakhryapin is the Managing Director of Agnitum, Ltd.

Mikhail Fedorov is the Public Relations Manager for Agnitum, Ltd.

[hayc59]

MegaHertz, thank you! needed to be clarified

[halcyon]

Thanks for the update gkweb!

I'm perhaps nitpicking, but to me Look 'n' Stop is not a true application rules based filter. It's just a packet (address/port/protocol/etc) filter.

The allow/deny global rules per application are imho a glue-on afterthought.

Not to say that it isn't a good firewall based on what I've read, but it's not (IMHO, if I'm not mistaken) a proper rule based _application_ firewall.

If it were, I'd buy it in an instand and forget about Kerio, ZA and Outpost Pro :)

regards,
Halcyon

[Phant0m]

I have to agree somewhat with halcyon, I’ve not seen Application Filtering Layer such like I have with Look ‘n’ Stop, normally Application Filtering Layer not only detect the Applications accessing Client&Server Environments but also controls packets not only with Destination IP/ports but Source IP/ports. And what Frederic implemented recently in v2.05b1 is far from what I’d call average Application Filtering systems.

But personally I would not want Frederic to modify the current style but ask for additional Layer; how Look ‘n’ Stop Application Filtering Layer currently works it sees Applications accessing Client&Server Environments very early in the process, so early in the process it cannot retrieve the Connecting Info such as IP/ports, so if there was any chance of leaking because of how the average Application filtering layers been designed it surely not the case with Look ‘n’ Stop’s Application Filtering layer.