Outpost firewall 7 fail the leaktest.

Discussion in 'other firewalls' started by kuti, Sep 25, 2010.

Thread Status:
Not open for further replies.
  1. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hello guys,

    At the first, sorry for my broken english because it is not my native language.

    I would like some advise to configure outpost firewall 7 to pass the leaktest. Currently my security setup :

    - Outpost firewall 7 (lifetime license).
    - Nod 32v4 ( Paid version).
    - CounterSpy (Paid versioin).
    - Windows server 2008 R2 (got free because i am student , poor me ).

    I passed all the test at pcflank.com except leaktest. In outpost, i only place ekrn.exe in self protect exclusion list.

    http://i55.tinypic.com/2mqswlj.png

    If anybody having solution of my problem, please let me know.

    Many thanks.
     
  2. phaser

    phaser Registered Member

    Joined:
    May 28, 2010
    Posts:
    35
    Why is the firewall in auto-learn mode? That would explain the leaktest failure...


     
  3. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hi phaser,

    Thanks for your quick reply. I just disable auto-learn mode but its still fail the leak test.

    :|
     
  4. phaser

    phaser Registered Member

    Joined:
    May 28, 2010
    Posts:
    35
    during the learning mode, Outpost probably created some rules to allow the leaktest. you should delete those and run the test again.
     
  5. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hi phaser,

    I did delete old rule for flank leak test before made a test, I even set block for all rules in anti-leak but leak test still penetrated some how. This is bad.
     
  6. minoka

    minoka Registered Member

    Joined:
    Nov 5, 2005
    Posts:
    50
    Hi,

    After deleting the rules, also do this: go to settings, anti-leak, click View List under Known Components, find the leaktest file and remove it, click ok, click apply, click ok again; clear your browser's cache. Launch the test again.
     
  7. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hi minoka,

    I did exactly like you said but its still fail. Something very strange here. o_O

    http://i54.tinypic.com/1skxap.png
     
  8. CogitoTesting

    CogitoTesting Registered Member

    Joined:
    Jul 4, 2009
    Posts:
    901
    Location:
    Sea of Tranquility, Luna
    Hi kuti

    If you are using a x64 computer I can confirm your findings and the current OSS 7 fails PC Flank leak test and moreover it also fails most of the Spyshelter tests as well as Zemana's. There is no doubt in my mind that there is something wrong with the current build.

    Here is something from Agnitum forum that might interest you:

    http://www.outpostfirewall.com/forum/showthread.php?t=25610&highlight=leak test


    Thanks.
     
  9. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hello CogitoTesting,

    Thanks alot for the link. So this problem is out of our hand now.

    Hopefully outpost will fix this bug in next future build.

    Kind regard.
     
  10. CogitoTesting

    CogitoTesting Registered Member

    Joined:
    Jul 4, 2009
    Posts:
    901
    Location:
    Sea of Tranquility, Luna
    You are welcome.

    Thanks.
     
  11. minoka

    minoka Registered Member

    Joined:
    Nov 5, 2005
    Posts:
    50
    Thanks for the thread CogitoTesting, I had forgotten about it :)

    I ran the test again.
    On my win xp sp3 32-bit machine, OP 7.0.3 passed it. When prompted, I did not allow pcflanktest.exe to control other apps with OLE.
    On my other machine, win 7 pro 32 bit and Ubuntu 10.4, OP 7.0.3 also passes the test after blocking pcflanktest.exe via the same prompt as above.

    Kuti, have you reported this flaw to Agnitum?
     
  12. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    Hi minoka,

    I will forward this problem to outpost now. Thanks for the tip.

    Regards.
     
  13. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    I got a reply from Outpost support which is:

    ***
    Dear Phan,

    Thank you for your message.

    Unfortunately, OLE Automation test will not be passed on x64 systems
    due to Micrsoft PatchGuard security implementations.

    --
    All the best,
    Svetlana Goncova
    Agnitum Support

    ***
     
  14. minoka

    minoka Registered Member

    Joined:
    Nov 5, 2005
    Posts:
    50
    Thank you for sharing Agnitum's reply.

    Here is Microsoft's FAQ on Kernel Patch Protection for anyone who might be interested.
     
  15. kuti

    kuti Registered Member

    Joined:
    Aug 22, 2010
    Posts:
    28
    The link is very helpful.

    Thanks again, minoka.
     
Loading...
Thread Status:
Not open for further replies.