An Independent Firewall Leak Testing

Learn about Computer Security Leak Testing/Attacks/Vulnerability Research
1

Hi All,

Guys at the following site published a comprehensive firewall leak test.
http://www.matousec.com/projects/windows-personal-firewall-analysis/leak-tests-results.php

Unlike other testers, these guy(s?) are systems programmer(s) and are very familiar with modern malware techniques.

Thats why cheaters failed ! :wink:

Current version i.e. CPF 2.3.6.81, had a race condition bug which caused it to fail the leak test “Coat” but beta versions are immune from this bug.

Egemen

2

Read it and weep :cry: ::slight_smile: ;D

3

Congrats and keep up good work and do not start cheating, you do not have to unlike others.

4

I can’t believe the Outpost guys tried to cheat :o. Did they think they wouldn’t get caught ::). I bet alot of Outpost user’s will deflect because of this and guess where they will be coming…

:slight_smile:

Edit: I wonder why ZoneAlarm Free wasn’t included in the tests or does it have similar protection as the paid version?

5

Zone Alarm free doesn’t come close to the paid (Pro) one…

6

(R) (:LOV) :BNC

7

Congrats go to the Comodo crew for a job well done. (:CLP)

jasper

8

Here “cheating” means “inadequate defense”. So its defense is good enough to pass the leak tests. But when it comes to the real world, such a defense is hardly enough.

So please note that “Cheating” does not mean “deception” in this context.

Egemen

9

Egemen, Melih,

Do we know what Matousec means by “Highest Security” in regards to CPF? I realize the “Default” is probably from an automatic install; CPF’s regular settings. What is their “Highest”?

TNX,

LM

10

It should mean “Do not show alerts for the applications certified by COMODO” option disabled. With this option enabled CPF fails wallbreaker(1,3,4) tests.

Other than that out of the box for anti-leak resistance should be as good. And for that test, we intentionally skipped further checks because it would generate unnecessarily large number of alerts. So when HIPS enabled CPF is released, it will ask before the process is executed as others do.

Currently, it does not pose a really serious risk because it is highly visible to the user(Otherwise CPF would catch).

You can leave your settings as out of the box.

Egemen

11

Thanks for the info, Egemen!

LM

12

In a way, cheating in this context does mean deception: deception of the end user. Outpost Pro wants the end user to feel fully ptotected by putting in measures that will get around the leak test. But in reality, the measures in place will not truly protect the end user from “real world” malware.

I would call that deception.