Kerio failed these tests...

Discussion in 'other firewalls' started by Slovak, Mar 16, 2004.

Thread Status:
Not open for further replies.
  1. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    Using the latest Kerio, I decided to test the firewall with the tests from this site http://perso.wanadoo.fr/jugesoftware/firewallleaktester/eng/index.html
    Anyway, my firewall failed these tests....firehole, pcaudit, pcaudit2, thermite, copycat, and awft(firewall scored only a 1). What can I do to pass these tests? Do I need to try a different firewall?
     
  2. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    Hey sloval,
    Kerio is primarily a rule-bound firewall and it works as you set it. Dont Know if that is too referrable to a beginner.
    Next, these tests are not everything if not anything always and once they are done, your firewall normally makes rulesets on own(dont know for kerio as its user controllable firewall)
    I better tell you to go for Zonealarm or Outpost as they are program-dependent and not user-controlled.
    More comments will be coming
     
  3. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    I wish I could use Zone Alarm, but every time I install it my computer will not restart, have to always reboot to safe mode and uninstall just to get to windows again. o_O
     
  4. subratam

    subratam Registered Member

    Joined:
    Nov 14, 2003
    Posts:
    1,310
    Location:
    Issaquah, WA
    :eek: after you install ZA, your computer wont restart.. now that is exceptional.
    try for outpost once and see if same happens
     
  5. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    Why Outpost? Should I uninstall Kerio, or just shut it down?
     
  6. Shunned

    Shunned Guest

    Slovax....you seem to be getting a head of yourself.. zone alarm will install on any windows operating system...win95-winXP....obviously there is a problem....an it may be very wise to locate the problem before trying to install yet another firewall
    Have seen your posts regarding the zone alarm issue..other than un-installing ZA using the safe zone....have you done anything to locate the cause of the problem?? Left-overs from un-installing ZA may cause another firewall to have issues. Kerio seemed to work ok for you.....leak test are another issue entirely.....point is....whats the deal with ZA??
    If ZA is the firewall you want to use..then find a way to use it..by finding out what the problem is...people here will help you...it may take some time...
     
  7. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    You can pass them leaktests. Just download SSM and don't allow them tests out. :)
     
  8. Shunned

    Shunned Guest

    Slovax

    Please ignor my last post. After reading other posts you made on the ZA issue I noticed you were already advised of a possible problem. So good luck.....wish you well on this
     
  9. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    What's SSM?
     
  10. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    System saftey monitor. I hope he didn't change the name again. ;)
     
  11. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    Can you provide a link for me?
     
  12. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Sure can. :)
    http://www.maxcomputing.narod.ru

    here's the link to the english site.
    http://maxcomputing.narod.ru/indexe.html?lang=en
     
  13. optigrab

    optigrab Registered Member

    Joined:
    Nov 6, 2002
    Posts:
    624
    Location:
    Brooklyn/NYC USA
    Slovak,

    While I think SSM is a good recommendation, I believe a couple of other points may be useful to you.

    First according to Guillaume's (gkweb's) site certain tests can defeat every popular firewall at the highest setting. Changing firewalls probably won't allow you to pass all those tests anyway.

    Second, If you have Kerio locked up as tight as possible, you're pretty safe indeed (IMO, it's a fine firewall). See other posts that question the real value of passing all those tests. You should probably do some research at the Kerio forum to make sure you've done all you can.

    Finally, you might be better off turning your attention to a new layer of protection, like a program sandbox (SSM) or even a router with its own firewall.

    Just my two cents, offered cordially.

    Optigrab ;)
     
  14. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    good point Optigrab, i have almost nothing to add ;)

    just a thing : when next Process Guard version will be released (v2.000), take a look at it, it could be something you will love :rolleyes:
     
  15. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    I have a router, so technically speaking I have a hardware firewall, but I am downloading SSM now.
     
  16. notageek

    notageek Registered Member

    Joined:
    Jun 3, 2002
    Posts:
    1,601
    Location:
    Ohio
    Make sure you block these tests when you run them with SSM.
     
  17. Slovak

    Slovak Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    515
    Location:
    Medina, Ohio
    Still downloading, taking a while even with a business class dsl connection o_O
     
  18. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    mirror on my website :

    http://perso.wanadoo.fr/jugesoftware/ssm.zip
     
Loading...
Thread Status:
Not open for further replies.