Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » 2006 FireWall Leak Tester results
Search Topic:
Uniqs:
1599
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Firewall Settings for Actiontec Gateway DSL don't make sense »
« Calcs.exe  
page: 1 · 2
AuthorAll Replies


jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
2006 FireWall Leak Tester results

Updated March 2006

»www.firewallleaktester.com/index.html

Jetico leads the pack.


Cudni
La Merma - Vigilado
Premium,MVM
join:2003-12-20
Someshire
And the Norton, L&S, Outpost and ZA are almost evenly matched

Cudni


ZZZZZZZ
Premium
join:2001-05-27
PARADISE
reply to jbob
Boclean kills the leaktest before it can run..........:)
--
Woman's hockey gold..OLYMPIC champions!:)

fict0n

join:2005-03-28
Rampart, AK

said by ZZZZZZZ See Profile :

Boclean kills the leaktest before it can run..........:)
Is that because BOClean has harmless leaktests in its database, or because BOClean requires every exe to be registered?

Either way, I reinstalled Jetico after seeing the results. If I only need protection outbound from leaks and trojans, then it's exactly what I have been looking for.


SpannerITWks
Premium
join:2005-04-22

reply to jbob
Yeah very impressive ! And his www is a nice source of other info too.

BOClean has certain LT's in there, but not all by any means ! Not that i think it needs to have, but it is useful to have something for people to test it with, like LT's or Eicar or Trojan Simulator etc, as an indication that BOC is working, because most of the time you wouldn't know it, as it's meant to be.

A good FW like ZA Free for example, set up for Max security combined with an Anti .EXE goes a very long way to preventing those LT's from ever getting out ! And just because something is a test or a POC doesn't mean the concepts can't or won't be exploited by someone. So i feel it's much better if you can pass all/most of them than not.

And not everybody wants to play around with Real life nasties to test things out with !

Put that together with a Top performance AV and AT etc, and you're pretty damn secure.

Naturally other measures also help greatly such as, secured Browser/PC and good old common sense.

Spanner
--
I Only Know What I Know, But I'm Learning all The Time - Stay Safe - Spanner intheWorks/SpannerITWks


zc190



reply to jbob
Thanks for the headsup Jbob. I wonder if the tests were done without any tweaking to the firewalls though. I mean, were they used with 'out of the box' settings so to speak. Could each firewalls ratings be improved by making a few adjustments to the settings?


norwegian
Premium
join:2005-02-15
Outback
·WestNet Broadband


2 edits
reply to jbob
It's good to see a small firewall like Look"N"Stop do so well against some of the larger ones

The foirst question i thought of looking at the results, is where is Kaspersky's AntiHacker ??

Edit: Never mind, i found the reason, here -

»www.firewallleaktester.com/news.htm#51

and the awards page that stopped it. I wonder how 1.8 would have gone

»www.firewallleaktester.com/reward_stats.htm


Nogard is me
Premium
join:2004-01-08
Columbus, OH
reply to jbob
Looks like Jetico id the best with a 23 out of 27. Not to shabby if you ask me.


fegul
Premium
join:2004-08-23
united state

reply to jbob
I've been trying Jetico, and while its a good firewall, its popups are just ridiculous. I tell it to remember my choice and it forgets on the next reboot even when I save the settings.
--
|My Blog|Fegul.com|


dontlikejetico

@pureserver.info

reply to jbob
I also tried Jetico after these tests and forget it! I don't like Jetico. As others said, way too many pop-ups! It's not worth it imo. I'll stick with my regular firewall. It has way more features than Jetico and it's also free.

Jetico is probably good if your a bit paranoid and an uber geek or something, but for the rest of us it's probably not needed.

Who cares that much about leak tests anyway. While they are interesting, I think tests like this are really overrated and unfair because most of the other firewalls are very very good firewalls and in order to fail a 'real world' leak test it would really depend on you getting a trojan somehow. Also if you have a solid AV it would most likely detect any trojans. There are a lot of other ways to protect yourself against malware than just a firewall like Jetico.

Just because the other firewalls can't pass all leak tests (or not as many as Jetico) is no reason to just give up on them. Just make sure you have a good up to date AV (and maybe AT/AS) and you should be ok.

Also for similar results to running Jetico, just run something like ProcessGuard, AntiHook or SSM or whatever, along with your regular firewall. You'll get similar protection, maybe even better than Jetico on its own.

Too bad SSM is payware now, but PG and AH both have free versions available.

fict0n

join:2005-03-28
Rampart, AK

Sounds like you're rationalizing your way out of good security.

If your settings aren't being saved, go into the options. Also, learn how to use the program before you complain about it being too difficult.

I agree, it would be great if your firewall did all the work itself and never bothered you with any big decisions or asked you to think. Security has a price, if you can't pay it go use WinXP firewall, it will never bother you like Jetico.


Daniel
Premium,MVM
join:2000-06-26
Pleasanton, CA
clubs:

reply to jbob
Advanced attackers can bypass all the tools in the list with impunity. Focus more on learning what good security actually is than stacking tools; the former will keep you much safer.
--
dmiessler.com -- grep understanding knowledge


fegul
Premium
join:2004-08-23
united state

reply to fict0n
If you spend more time trying to tell your firewall that nod32's updater is safe, than you do use your computer, something is wrong. Sure there is a price to pay with security, but Outpost worked well for me, and didnt require that much configuration after it was all setup.
--
|My Blog|Fegul.com|


firewalled2

@130.94.x.x

reply to jbob
Yeah, I'd like to see someone download a trojan to my computer, then run it to get past my firewall and anti-virus LOL. Not to mention all my other security software LOLx2.

Jetico may be good, but there are other alternatives that are better and less annoying in my opinion. But my guess is most people who just pratice safe hex alone, won't even get any type of rare trojan, like these so-called leak tests, that could somehow bypass all your defenses.


SpannerITWks
Premium
join:2005-04-22

reply to jbob
firewalled2

I think that if you went to the FW leaktest www and actually tried ALL the tests, you might be very surprised @ the results.

Spanner
--
I Only Know What I Know, But I'm Learning all The Time - Stay Safe - Spanner intheWorks/SpannerITWks

zteardrop

join:2005-12-20
Brooklyn, NY
reply to jbob
If you look at the combination for market share i.e. breadth of users both novice and advanced, and leaktester score, Norton is the clear winner. Zone is close.


gugarci
Premium
join:2004-02-25
Bergen Co
reply to jbob
I was shocked to see how low ZA free scored.

mvdu
Premium
join:2003-07-28
Collegeville, PA

reply to jbob
Kaspersky is calling the Breakout leaktest an ACTUAL trojan - trojan.agent.ae or something like that. When I tried it with KIS off, it messed up my desktop theme, making it all white. Had to use system restore. So even if a false positive, I'm not trying it again.

Otherwise, good testing as always.
--
Don't Blame Me, I Voted for Kerry!


firewalled2

@207.195.x.x

reply to SpannerITWks
I have tried most of them and like others have said System Safety Monitor beats them and wouldn't even let them start.

I'm not saying my firewall can beat all these LTs alone, but that along with other security software I can stop them.

I think something people need to keep in mind about these LTs is they are not REAL trojans/malware. They are just a bunch of tests. If they were real trojans in most cases your anti-virus and other security software would detect them anyway.

So in order for real trojans based on these LTs to beat your firewall you have to be dumb enough to download and run a rare trojan with these LT abilities. Then you would have to have a really crappy anti-virus that would miss them and on top of that, the trojan authors would have to hope you don't have any other security software that could also be used to stop them.

So in the real world the chances of you getting a trojan based on one of these LTs is rather slim and even if you did get one, in all probablity your other defenses (that I hope you have) would catch them.

I just look at these LTs as another way for this or that competing firewall company to say "See, my firewall is better than yours!" Any decent firewall, even ZA free, along with a decent anti-virus combined with common sense and maybe a couple other security programs like Process Guard, SSM or some other decent HIPS is all most people will ever need against any real trojans based on these LTs.

Of course if anyone can show me how exactly they are going to get me to download one of these rare trojans to my computer, then get me to execute it and bypass all my defenses, I'm all ears LOL!


notgonna

@telus.net
reply to jbob
I dont care what test it is im not dowloading ANY exe from anywhere
try this instead »scan.sygatetech.com/
Forums » Up and Running » Security » SecurityFirewall Settings for Actiontec Gateway DSL don't make sense »
« Calcs.exe  
page: 1 · 2


Monday, 30-Nov 05:18:34 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [124] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [82] Weekend Open Thread
· [80] TiVo Sees Record Customer Losses
· [79] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [63] Thanksgiving Open Thread
· [41] ICANN Slams DNS Redirection
Most people now reading
· Are GPS's better today? [General Questions]
· Is Easynews down? [Filesharing Software]
· [Newsgroups] Newzleech down? [Filesharing Software]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· Windows 7 boot manager editing questions [Microsoft Help]
· Grey Cup on the Web? [Canadian Chat]
· persistent connection to qw-in-f113.1e100.net on boot [Security]
· [ PVP] 3.2 DK PvP D/W Spec... [World of Warcraft]
· [Snow Leopard] NFS Mounts - no more Directory Utility [All Things Macintosh]
· Considering Leaving Vonage, who should I Consider? [VOIP Tech Chat]