Kerio PF review at Matousec - is it reliable

[rothko]

is this review of Kerio PF (not the latest version btw) reliable:
http://www.matousec.com/projects/win...ewall-4.3.246/

they seem to be pretty damning about it, and even refer to Kerio as:
a cute packet filter and not a personal firewall as its vendor (and its name) claims. It is more like 'A Hacker's Best Friend'. We can hardly imagine a personal firewall with worse level of security.

apologies if this has been discussed before. i did a quick search in this forum but couldnt see a thread dedicated to it, just some mentions in other threads.

[Brinn]

http://www.matousec.com/projects/win...l-firewall.php

Is it not a possible danger to allow games to delete documents or control system services? Why should be the media player allowed to install kernel drivers? No, there is no need to allow such actions.

The purpose of a personal firewall is to set up rules that limit applications to perform actions they should not be able to do and to allow actions that are expected from them.

Their definition of a firewall is a bit unreasonable.

[TOMxEU]

Why should be allowed something, that it is not really needed and could be exploited?

The purpose of a personal firewall is to set up rules that limit applications to perform actions they should not be able to do and to allow actions that are expected from them.

I just allow a few IPs for WMP to stream radios and the rest is blocked.
WMP likes to connect to online pages, even when watching offline movie.

[BlueZannetti]

Originally Posted by rothko

apologies if this has been discussed before. i did a quick search in this forum but couldnt see a thread dedicated to it, just some mentions in other threads.

I don't recall an extended discussion regarding it here. Some discussion has appeared at DSL Reports.

Blue

[Espresso]

Sounds like a bunch of snotty geeks who have found a novel way of paying for their studies.

[GS2]

You may wish to look at this site:

http://www.firewallleaktester.com/index.html

Has some interesting comparisons here:

http://www.firewallleaktester.com/tests.php

I think these test are like Av tests, it all depends on the methodology. Ultimately nothing is completely safe, and 'unhackable'

[Legendkiller]

Originally Posted by rothko

is this review of Kerio PF (not the latest version btw) reliable:
http://www.matousec.com/projects/win...ewall-4.3.246/

they seem to be pretty damning about it, and even refer to Kerio as:
a cute packet filter and not a personal firewall as its vendor (and its name) claims. It is more like 'A Hacker's Best Friend'. We can hardly imagine a personal firewall with worse level of security.

apologies if this has been discussed before. i did a quick search in this forum but couldnt see a thread dedicated to it, just some mentions in other threads.

dude,if you rely on matousec's reviews on firewalls than i am sure you won't be relying on any firewall in the market..
Kerio is a very decent firewall and a zillion times better than described at this stupid website...
goto the links gs2 and also goto sites like download.com and you'll find people appreciating it...

[Brinn]

Originally Posted by TheTOM_SK

Why should be allowed something, that it is not really needed and could be exploited?

Is that the job of a firewall, though?

That site is apparently looking for a complete security suite and is judging firewalls from this perspective.

[Bubba]

Originally Posted by rothko

apologies if this has been discussed before

I don't recall one concerning Kerio but We do have an ongoing discussion concerning bugs in zonealarm and a matousec review.

Bubba

[Dwarden]

well You can now hope for KPF fixes and improvements in next updates as Sunbelt bought Matousec security report about KPF