What should I do to prevent my firewall to be fooled?

[HoLmEc]

I visited http://www.firewallleaktester.com and I found many tests.. What steps should we do (firewall rules, programs) to, at least, minimize this risk?

I've got Opera Browser, KAV, Process Guard FREE n under Win XP SP2 .. Right now Im using Kerio 2.15 but I dont know if I'll switch to Outpost/Sygate ..

Thanks guys

[ronjor]

There is much info in the sticky above your post for Kerio 2.15 as well as others. :)

http://www.wilderssecurity.com/showthread.php?t=24415

[BlitzenZeus]

Welcome to the world of Microsoft exploits, not firewall exploits.... Most of the exploits exploit the windows os, or internet explorer. Very few of these are possible firewall exploits, and some even give false positives when fully prevented.

The only true way to prevent them is to use a sandboxing application properly, but the problem with that is sandboxing appliations have a harder learning curve which is very dependent on your machine, along with you actually need to know how to configure the firewall your using properly. Some firewalls have partial sandboxing, its usually very minimal, and isn't enough to prevent much of anything when it comes with operating system exploits.

If you don't know how to configure your firewall correctly, and you can't tell the difference between an os/ie exploit compared to an actual firewall exploit, then your mostly just falling for their bs scare tactics.

[gkweb]

Hi,

BlitzenZeus has given you a sume up.
On my website are given advices and different possibilities to protect your firewall and your setup from malicious hijacks :
http://www.firewallleaktester.com/advices.htm
http://www.firewallleaktester.com/software.htm

As said, whatever the firewall you choose, the OS is the main problem.

Regards,

gkweb.