Firewall Leak Test

[theraven]

I thought someone had already psoted this , but i couldn't find it
anyways , lots of questions abt firewalls have been coming up, even with an existing thread running
however lets make it easy
u think ur firewall is the best ? prove it!
take these extensive series of tests located her
http://www.firewallleaktester.com/
and post ur results here
state ur firewall name:
version:
custom rules defined if any:
test #n : pass/fail

i would appreciate if someone startes with ZAP
for those who stick to it , ur in for some bad news

from that i've seen , Jetico seems to be possible winnder, and ZAP is supposed to have very bad outbond protection !
so with these as guidelines and no flaming, lets see how u faired !

[whim_gen]

Jeez man,I managed to type out such a detailed test results sheet and damn,I was logged out b4 I posted .So,here is somewhat a summary of the tests.
The test machine used was Win 2k Pro with SP3 + ZA Pro (6.0.667.000)+Avast Free + Huawei modem's built in firewall.

Achtung!
Dont download the copycat test in the webpage.My Avast AV detected it as a trojan

Also,Disabling IE did help,bcoz some tests make use of exploits in IE ....so,if u have disabled IE in ur system,it means there are less vulnerabilities for the hackers to get hold of .
All the tests but one when run, managed to trigger alerts from ZA Pro (which means I can either accept it or deny it) which indicate that indeed my system is safe Cool
And well,the other test (where packets are sent from my PC) that managed to bypass the firewall,is because I have set the TCP/UDP ports as open to enable Shareaza.So,I guess u shud have a trade-off.
Maybe u shud try with these tests with ZA Personal edition and post the results here.
TAFN.
Keep the thread goin
Adios

[it_waaznt_me]

Its there in the Onlie Safety sticky Raven ..

To whim_gen : You can find the source of the program right there on the website .. Its not a trojan it acts like one ..

To the thread .. My config : XP Sp2 No AV, only Jetico firewall ..
Muahahah .. My Jetico passed all tests except for Wallbreak and Ghost .. I dont understand why is it failing Ghost because it passed it in the test listed at website .. Here's my score :
1. Leaktest : Passed
2. Tooleaky : Passed
3. Firehole : Passed
4. Yalta : Passed
5. Pcaudit : Passed
6. AWFT : 10/10
7. Thermite : Passed
8. Copycat : Passed
9. MBTest : Passed
10. WBreaker: Failed (3rd test passed out pf 4)
11. PCAudit2: Passed
12. Ghost : Failed
13 Dnstester: Passed
14: Surfer : Passed ..

WBreaker fails because I have configured my system like that .. I have allowed Explorer.exe calling my def. browser so thats why it fails ... I dont understand why Ghost fails .. I think Jetico finds some difficulty in handeling child process when the parent process is dead.. Umm. Lets see ..

Edit .. I seem to have missed Outbound test .. Outbound is also blocked by jetico but I dont have any ethernet adapter enabled so it doesnt run properly ..

[theraven]

here's me
winxp SP2
default browser mathon ( hence IE is enabled and default core)
no AV
zonealarm wireless 5.5.094.000

1. Leaktest : passed
2. Tooleaky : failed
3. Firehole : failed
4. Yalta : passed
5. Outbound: N/A
6. Pcaudit: failed
7. AWFT: 1/6
8. Thermite: failed
9. Copycat: failed
10. MBTest: N/A
11. WBreaker: failed
12. PCAudit2: failed
13. GhosT: failed
14. DNSTester: passed
15. Surfer: passed


then i notched up program protection to HI
and it passed all BUT pcaudit and Thermite

AWFT scored 4/10
and wallbreaker 1/4

im updating zap today .. will post results again

[theraven]

ok as promised im back with zap 6.0.667 !!
and im happy to announce all test were passed
im happy with ZAP again and u have no idea what a relief that is

so synopsis ? zap is still the best

[icecoolz]

ooo...completely forgot abt this link I'll post my scores in a bit. Me think me needs new drivers for my DSL connection. Cos its causing all the Firewalls not to work !!!

[kalpik]

Kaspersky Internet Security 2006 Beta (Build 222a).

Passes ALL leaktests! ;D

[Choto Cheeta]

Me with ZAP 6, KAV 5.0.388, Spybot Search n Destroy 1.4, over winXP SP2

1. Leaktest : Passed
2. Tooleaky : Passed
3. Firehole : Passed
3. Firehole : Passed
4. Yalta : Failed (it showed) (Even ZAP asked me what to do? i chose Deny) (failed means Passed, so system passed the test)
** Outbound : N/A (Program didnt start)
5. Pcaudit : Passed
6. AWFT : 10/10 (man 1MB, then install... )
7. Thermite : Passed
8. Copycat : N/A (KAV detected some thing & file was deleted..)
9. MBTest : N/A (copy that here copy this there, i didnt...)
10. WBreaker: Passed
11. PCAudit2: Passed (Damm trojan but gr8 ZAP)
12. Ghost : Passed
13 Dnstester: Passed
14: Surfer : Passed

Hmm its seems that ZAP+KAV+Spybot again worrking for me... allthough Test 4 that is Yalta showed messege that it was my firewall wasnt able to detect it, but i know that ZAP did through messge asking me what to do... i chose Deny, still if it was a success then ZAP really wasnt able to block it... it fails means system passed, so system passed the test & i didnt went for MBTest as so many copy pest thing... i didnt had the time...

edited by me after theraven's update....

[Biplav]

i am using opera beta 9, winxpsp2, no anti virus sw, outpost firewall.
all tests passed but the tooleaky test.
it shows me that
" There was apparently no leak your computer or internet connection is too slow, or most likely the GRC.com site is down temorarily. try later"
is the website down or has my firewall blocked it?
ps. my interconnection is no way near to slow.

[theraven]

@sourav
if yalta failed means the test passed

@biplav mostly ur firewall blocked it , so be happy

[Choto Cheeta]

Originally Posted by theraven

@sourav
if yalta failed means the test passed

hay.. thats good news 4 me... thnx for that update... so i am updating my test result post...

& hay whats up with this MBTest test?? why so much copy pesting... is it safe to do so??

[theraven]

follow the test .. the tests are completely safe dun worry
the description is there on the mbtest page

[godsownman]

I am using Zone Alarm Free version with Windows XP SP2 . See the results. I feel that I have been sacrificing my security after this test.

Guys please advice what I should do.


1. Leaktest : Passed
2. Tooleaky : Passed
3. Firehole : Passed
4. Yalta : Passed
5. Outbound : ( does not suppost XP)
6. Pcaudit : Failed
7. AWFT : Failed 2/10
8. Thermite : Failed
9. Copycat : Didnt work
10. MBTest : Didnt work
11. WBreaker: Failed
12. PCAudit2: Failed
13. Ghost : Passed
14 Dnstester: Passed
15: Surfer : Passed


My Firewall got less than 50% marks

Is this because of the ZA free version. Should I proceed to ZA PRO.

Please advice.

[theraven]

u didnt mention the version of ur firewall boss
i'm sure its mostly 5.x
update to latest version n try again

[godsownman]

Its 6.0.631 but its the free version.

I have finished with the 15 day trial of the PRO version, sometime back and am using the free version now.

Please advice .

Regards

[theraven]

thats funny
anyways in that case try pro
im using pro and u can see my tests above

[godsownman]

Originally Posted by theraven

thats funny
anyways in that case try pro
im using pro and u can see my tests above

Today I progressed to PRO.

most of them passed but

- PCAudit 1 and 2 FAILED.

- AWST got 10/10

- Wallbreaker got 1/4

- Thermite Failed .

I think its time I move to 6.0. 667 as theraven said.

[theraven]

yup .. and if u still fail tests
keep windows explorer to a max trust level 2 .. not 3
that should do the trick

[godsownman]

Thanks Theraven,

I will get back, as soon as I have downloaded and installed it.

Ofcourse I will redo the tests also.

My computer is still vulnerable and I cannot bear it.

Regards and Best wishes

[godsownman]

I have downloaded it . But before installing I wanted to know if there is anyway in DELETING all the previous settings , like deleting a registry key etc...

Please tell me if there is something like that or should I just uninstall and re-install it the 6.0.667 version.

Regard

[drvarunmehta]

Just uninstall and reinstall. No need to mess with the registry.

[theraven]

u dun need to uninstall
u can install over
what settings do u wanna get rid off anyways ?
if ur adamant on that then an uninstall wont harm
u may bave to restart one extra time tho

[godsownman]

Thanks a lot

I messed a lot with the settings the other day.

Thats why I was wondering. Anyway let me see . I will decide soon.

Regards

[godsownman]

Ok Done installef and tested.

It passed all the tests that it could . I mean the ones that worked on my computer .

I am relieved .

Thanks everybody for your help.

[hsksattish]

Hey did anyone test with the default windows xp sp2 firewall and default configurations?

[kalpik]

XPSP2 firewall does not have outbound protection. It will fail ALL the leak tests.

[Choto Cheeta]

Originally Posted by kalpik

XPSP2 firewall does not have outbound protection. It will fail ALL the leak tests.

have u tried it after installing onecare?? as it does boots the performance of IFC a gr8 deal...

[vln_0007]

By the by could anyone tell me which is the best firewall

[vln_0007]

i installed jetico , but my internet connection has become very slow any remedy for this . my connection is 512 kbbs . its not allowing IE to access the net , even i have granted all the permissions to IE . reply asap

[ashisharya]

passed all the test except the pcflanky with ZA