Which firewalls block leak tests

Discussion in 'other firewalls' started by wanderer, Jul 19, 2003.

Thread Status:
Not open for further replies.
  1. wanderer

    wanderer Guest

    ive tried a lot of leaktests like copycat and using kerio i always fail them , is it that rule based firewalls fail these or what ?? if it is what firewalls will pass these , will zapro 4 pass o_O
    thanks ahead of time for any input
     
  2. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,876
    Location:
    New England
    Hi wanderer,

    Check out the website below for some detailed testing of many leaktests against most of the major software firewalls...

    http://www.firewallleaktester.fr.st/
     
  3. wanderer

    wanderer Guest

    ok i went through it and noticed that look n stop and outpost firewall did a lot better than the rest , and looknstop got highest ranking among them. correct me if im wrong but it shows that no firewall passed the copycat test ? And about these 2 firewalls are they rule based or kind of like zapro , if they are rule based can kerio rules be easily transfered or made on these firewalls by lookin at the kerio rules.
     
  4. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    I would consider LnS and Outpost as rule based firewalls.
    If you are familiar with making rules (ie. Kerio), you should have no problem. LnS default rule set or the advanced rule set will get most users going in the first instance. Outpost does have some automatic rules available in addition to manually configuring rules.

    Regards,

    CrazyM
     
  5. DevilFrank

    DevilFrank Registered Member

    Joined:
    Jul 20, 2003
    Posts:
    108
  6. root

    root Registered Member

    Joined:
    Feb 19, 2002
    Posts:
    1,723
    Location:
    Missouri, USA
    Did you see my reply? Outpost passed the test on my machine easilly. So did KAV.
    I even provided a picture to prove I wasn't lying. :eek:
    I post under the nick the_root over there.
     
  7. DevilFrank

    DevilFrank Registered Member

    Joined:
    Jul 20, 2003
    Posts:
    108
    Yes, I did see this post, but I can´t believe it. I did edit the file "EL_firewalllist" and type the outpost.exe in this file.
    Next step: I did execute the file "Evileaker.exe" and the outpost was shutting down. The connect to yahoo was going well. I didn´t install this program (Install Evileak As A Service)...
    Usually I´m absolutely delighted about the good job of Outpost. In this case I´m irritating.

    Regards from Germany
    Frank
     
  8. _anvil

    _anvil Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    56
    Firewar ( http://www.paoloiorio.it/fw.htm ) shuts OP2 down, too, although it is older than the firewall... :rolleyes:
    (no real surprise, because Firewar just looks for the process named "outpost.exe", which is the same in OP1 & 2.)
     
  9. BlitzenZeus

    BlitzenZeus Security Expert

    Joined:
    Feb 11, 2002
    Posts:
    451
    Location:
    Oregon, USA
    An unknown feature of Kerio 2x is that if you change a single registry key, it will stop all traffic if the engine is shutdown. It was not added as an option as they ditched it for some reason, and didn't build a localhost bypass into the block which lead to problems if you disabled the firewall. However when enabled, if something does manage to shutdown the engine, the firewall driver will stop all traffic which makes it impossible for the trojan to get out.

    If the engine is running, it will follow your rules, and normal operation without any problems. Just don't 'disable' it with the normal option, but if you do, there are steps to bring your firewall back up without a problem.

    http://www.broadbandreports.com/forum/remark,7309170~root=kerio~mode=flat
     
Loading...
Thread Status:
Not open for further replies.