SpyBot page says ZA can leak. ;-( !

[SG1]

At below link, is story, re ZA firewall; a real drag if hitherto nifty little firewall's easily poached by scumware types.

http://security.kolla.de/index.php?lang=en&page=news/news20030324

"Normally I don't spend time writing a news article for detection updates, but this time I want to notify you about a addition. ClientMan is a new Malware target; first reported as suspicious, it became clear soon that it will pass the ZoneAlarm firewall without user consent. When it tries to connect to the Internet, and ZoneAlarm displays it's dialog whether the program should be allowed to connect or not, ClientMan will auto-click the 'Yes' button after checking the 'Always' checkbox. This way, it grants itself Internet Access without the user even noticing more than a short flash of the ZA dialog.

This exploit has only been noticed with ZoneAlarm, not Outpost or Kerio. Detection has been added."
----------------------------------------------------------
So... I downloaded slightly older ver. of Sygate firewall from this site - in hopes it'll not leak like ZA; but perhaps I should've gone for Outpost or Kerio firewall that he mentions? What can one trust, re firewall(s)?

Regards, SG1 (Pat)

[Patrice]

Hi SG1!

Here you find some additional information about firewalls and so called Leak Tests:

http://www.pcflank.com/art21.htm

http://www.pcflank.com/art27.htm

You'll see that Look'n'Stop is the only firewall which passes all five Leak Tests. I'm using this firewall myself and I'm very happy with the inside-outside protection. Look'n'Stop alerts you of every (!) change of the allowed programs and of all new programs who try to connect to the internet.

Best regards!

Patrice

[LowWaterMark]

Here's a fairly detailed discussion regarding this topic from back when it first came out:

http://www.dslreports.com/forum/rema...ty,1~mode=flat