Leak Tests

Leak Tests

Secure Home | Search | About

Networking Firewalls - Software and hardware firewalls discussions 

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Leak Tests Kerodo 03-10-2006
---> Re: Leak Tests Sebastian Gotts...03-11-2006
|   ---> Re: Leak Tests Sebastian Gotts...03-11-2006
|       ---> Re: Leak Tests Sebastian Gotts...03-11-2006
|           ---> Re: Leak Tests Sebastian Gotts...03-11-2006
|               `--> Re: Leak Tests Sebastian Gotts...03-11-2006
Posted by Kerodo on March 10, 2006, 10:28 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Volker, you're famous: http://www.firewallleaktester.com/news.htm :)

As expected, there isn't a single software firewall that passes all of
these so-called 'leak tests'. The best of them seems to be Jetico,
which is pretty much what I expected also. Anyway, I posted this in
case anyone is interested in this sort of thing. Just shows, as some
here have said, that none of them can really ensure that nothing gets
out. To see the test results, hit the TESTS link on the left side of
the page and then View Results at bottom.

--
Kerodo

Posted by Sebastian Gottschalk on March 11, 2006, 4:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Kerodo wrote:
> Volker, you're famous: http://www.firewallleaktester.com/news.htm :)
>
> As expected, there isn't a single software firewall that passes all of
> these so-called 'leak tests'.

They're still runnning that shit?

> The best of them seems to be Jetico,
> which is pretty much what I expected also.

My leak tests:
- CreateProcessAsLogonW with SYSTEM account and kill the PFW.
- Try to delete all files,kill the process and uninstall the drivers,
reboot, try again. Usually 3 cycles are enough.

None passed at all.

Posted by Volker Birk on March 11, 2006, 11:05 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> My leak tests:
> - CreateProcessAsLogonW with SYSTEM account and kill the PFW.

For this, you'll need Administrator's rights.

> - Try to delete all files,kill the process and uninstall the drivers,
> reboot, try again. Usually 3 cycles are enough.

;-)

Never tried this one - aren't the "Personal Firewall" setup programs
setting file ACLs in a sensible way?

Yours,
VB.
--
Wenn Du "Ich sehe die Mathematik als einzigen Bereich an, wo es klare
Beweise gibt." und "Ich fuehle mich in einem Anzug unwohl." als Aussagen
mit aequivalentem Meinungsinhalt betrachtest, hast Du mit Deinem Gleichnis
recht. (Michail Bachmann zu Thomas Wallutis in d.a.s.r)

Posted by Sebastian Gottschalk on March 11, 2006, 11:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Volker Birk wrote:
>> My leak tests:
>> - CreateProcessAsLogonW with SYSTEM account and kill the PFW.
>
> For this, you'll need Administrator's rights.

These tests are usually run with Admin rights.

>> - Try to delete all files,kill the process and uninstall the drivers,
>> reboot, try again. Usually 3 cycles are enough.
>
> ;-)
>
> Never tried this one - aren't the "Personal Firewall" setup programs
> setting file ACLs in a sensible way?

See above.

Anyway, the most common error with privilege escalation I've seen was
the SE_CHANGE_CONFIG thing.

Posted by Volker Birk on March 11, 2006, 12:40 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Volker Birk wrote:
> >> My leak tests:
> >> - CreateProcessAsLogonW with SYSTEM account and kill the PFW.
> > For this, you'll need Administrator's rights.
> These tests are usually run with Admin rights.

This would be unbelievable dumb. Are you sure? *wondering*

> Anyway, the most common error with privilege escalation I've seen was
> the SE_CHANGE_CONFIG thing.

-v plz

Yours,
VB.
--
Wenn Du "Ich sehe die Mathematik als einzigen Bereich an, wo es klare
Beweise gibt." und "Ich fuehle mich in einem Anzug unwohl." als Aussagen
mit aequivalentem Meinungsinhalt betrachtest, hast Du mit Deinem Gleichnis
recht. (Michail Bachmann zu Thomas Wallutis in d.a.s.r)

Similar ThreadsPosted
Firewall Tests March 24, 2005, 5:24 pm
System firewalls - comparison, tests...? June 9, 2008, 6:22 am
Re: ZoneAlarm has a leak? November 24, 2005, 7:35 pm
Re: ZoneAlarm has a leak? November 26, 2005, 4:47 am
ZoneAlarm has a leak? November 24, 2005, 11:10 am
Firewall Tests Lower after Adding DSL Modem/Router July 25, 2006, 5:20 pm
ZA memory leak: the solution (?) January 30, 2006, 12:17 pm
linksys wrt54g router seems to leak. July 10, 2007, 3:43 pm

The site map in XML format XML site map

Contact Us | Privacy Policy