I use the speedguide.net to do a quick stealth test, and agnitum always leaves port 3389 open. Even If I clear all the rules for svchost.exe, port 3389 is still open, and the firewall doesn't even ask me (I am in block most mode and I allow auto rule creation for trusted apps). I have to make a manual rule blocking it. Regardless, I have found this to be the best free IPV6 aware firewall for my use. I didn't like PCTools because it had some more buggy application filtering behavior. I didn't like Privatefirewall because I found out it has no IPV6 ability short of identifying protocol 41 packets....same for Comodo Firewall. The Vista firewall didn't provide the functionality I wanted, and I like the built in HIPS in Outpost firewall. The higher memory usage isn't a problem because there is no slowdown. I will probably go back to Comodo when there is full IPV6 support.