Firewall vulnerability

big_gie · Oct 17, 2003

Hi,

I was looking for reviews on a good software firewalls and came across this:
http://perso.wanadoo.fr/jugesoftware/firewallleaktester/fr/pageweb/test.html
http://www.pcflank.com/art21.htm

The first one is in french, but the words aren't whats scarry: just try the softwares to show that your firewall isn't this good...

How come it may be this bad?? Why do firewalls are this insecure? Why do they sell those 40$ but aren't worth this??

And does anyone knows something more secure? And don't tell me linux, we all know

tanx

banzibaby · Oct 17, 2003

Damn, kerio 2.15 results dont look good at all, i have never heard of Look n Shop before

Cheers big_gie

BaNzI

big_gie · Oct 17, 2003

hehe kerio sucks

I just passed the last hours configuring it... now I'm restarting with Outpost...

I've tryed LooknStop, but it lacks the configuration... eMule was blind, and didn't find where to set rules for it...

Outpost seems nice. But it needs some tweaking to be more secure...

look @ http://www.outpostfirewall.com/forum/showthread.php?s=&threadid=7459

serjer · Oct 17, 2003

yeah outpost does need tweaking

,thx 4 link

desavedo · Oct 17, 2003

serjer said:
yeah outpost does need tweaking ,thx 4 link

Yea, never hear of those. I use the SonicWall, but it's expensive. I currently have the Tele3.

BVV · Oct 17, 2003

I use System Safety Monitor as an addition to my firewall. Here is a link to some information (not the homepage, that is as slow as a site can be) http://www.mickeytheman.com/forums/index.php?showtopic=11
SSM intercepts all programs, including those that penetrate firewalls, and asks the user permission to run it (or block it).

big_gie · Oct 17, 2003

SSM crash on my system...

serjer · Oct 17, 2003

oh well if sw firewalls gonna suxx,then i'm gonna get a damn old pc eg 486, put a penguin in it & use it as a firewall

big_gie · Oct 18, 2003

serjer said:
oh well if sw firewalls gonna suxx,then i'm gonna get a damn old pc eg 486, put a penguin in it & use it as a firewall

yeah, that should be an option...

but this won't block a program to hijack IE for exemple and communicate... A good firewall is something that whill prevent the outside from penetrating, but something from the inside may call home, like trojan/virus/spyware and the hardware firewall won't see it...

A router's firewall is good enought for things like "stealth scan" isn't it? How a linux box would get it more secure?

scarecrow · Oct 18, 2003

Xcuse me, but this test just repeats the self-explicable facts...
Every schoolboy knows the difference between incoming and outgoing flow control, or probably not?!
Kerio 2.1.5 has no real control over outgoing traffic -no checksum verification- (but that's no secret-else noone would bother trying version 3/4 variants...), and as for the PC flank test- this one is older than the great pyramid... completely outdated and useless.
Just use Kerio 3 beta 6, or the current limited kerio 4.0.4 free version- its limitations have nothing to do with real protection.
Both these versions don't work well with Win 9X, but if you are still using Win 9X this would be the last thing that should bother you...
And of course even the most secure firewall on earth would be useless if you setup a couple of bad traffic control rules.