Solved Firewall tests

[FranzB]

Hi

I am interested in testing the various security programs installed rather than relying on what other people's experiences are with firewalls and av programs THEY are using.
No offence meant but it is of little use being told "I use this and that and I have never had any trouble with viruses" since that particular person's computer may have never been subjected to an 'attack'.
Recently i came across the security tests of PCFlank (i had used it long ago for XP but had forgotten all about it). There is a firewall test, among others. Windows 7 firewall that i have installed failed the test, even with pretty high settings.
Somewhere on a forum someone made a remark suggesting that the test is rigged (or biased). What do you think about it?
If i use the leaktest of Gibson Reaserch the same happens.
Does anyone have any experience with these tests and the results obtained by them?
Do you know of any other tests?
And what do you think about the value of doing these tests?
I have mentioned somewhere on this forum the tests of Heise Securities where (harmless) viruses are sent to your mailbox to check whether these are blocked or not. My thoughts on this are the following. If the system fails the tests it's time for sure to do something about the computer's security. But what do these tests prove if the viruses sent are blocked, given the creativity
of those virus writers?
Thanks.

 

[Roderunner]

Hi FranzB. try this Comodo Firewall Test Suite

 

[FranzB]

Hi FranzB. try this Comodo Firewall Test Suite

Thanks for the reply. I looked at it but it seems that the test is not for W7 (?).
So i don't dare to use it.
(Btw, i always get highly annoyed when someone post something on an internet
page (in this case the comodo test, updated or not) without putting a date on it so you can see how old it is. The technical specs indicate that it is only for OS XP.
It's confusing).

 

[Roderunner]

Thanks for the reply. I looked at it but it seems that the test is not for W7 (?).
So i don't dare to use it.
(Btw, i always get highly annoyed when someone post something on an internet
page (in this case the comodo test, updated or not) without putting a date on it so you can see how old it is. The technical specs indicate that it is only for OS XP.
It's confusing).

It worked on both my Win7 computers. Maybe you used the wrong link. http://www.testmypcsecurity.com/securitytests/firewall_test_suite.html

 

[Roderunner]

I have re ran the test (it installs NOTHING on your PC)



Full Result is :- View attachment COMODO Leaktests result.pdf

 

[HammerHead]

Take A Look See

I have you tried this site?

https://www.grc.com/x/ne.dll?bh0bkyd2

 

[FranzB]

.................
It worked on both my Win7 computers. Maybe you used the wrong link. http://www.testmypcsecurity.com/securitytests/firewall_test_suite.html

-------------------------------

That's the web page i looked at. At the bottom under Test details - OS System(s) it gives Windows XP / Windows Vista. Nothing about W7.
I'll try it anyway.
Thanks.

 

[FranzB]

I have you tried this site?

https://www.grc.com/x/ne.dll?bh0bkyd2

Yes, i know the site and the leak test. As far as i know all firewalls fail the GRC test except ZoneAlarm which is, however, a real pain in the neck and not just inconvenient to use.

 

[FranzB]

I have re ran the test (it installs NOTHING on your PC)

View attachment 175703

Full Result is :- View attachment 175704

What firewall are you using?
I did the test for W7 firewall and i flunked miserably. Something like 100/340
and i think that i have pretty stiff settings, practically all at "high".

 

[Roderunner]

What firewall are you using?
I did the test for W7 firewall and i flunked miserably. Something like 100/340
and i think that i have pretty stiff settings, practically all at "high".

Agnitum's Outpost Firewall Pro on both computers with Life Time Updates.

 

[HammerHead]

I have you tried this site?

https://www.grc.com/x/ne.dll?bh0bkyd2

Yes, i know the site and the leak test. As far as i know all firewalls fail the GRC test except ZoneAlarm which is, however, a real pain in the neck and not just inconvenient to use.

Where did mine fail?

View attachment 175729

View attachment 175730

View attachment 175731

View attachment 175732

 

[Barman58]

A correctly set-up Comodo firewall, and router, passes all tests in both it's own, (not surprising), and the GRC tests for me

 

[HammerHead]

Commode Lid

Barman

I had several vulnerbilies via Commodo. But then none of my software is theirs.

 

[Barman58]

The one vulnerability I often find on systems where a good firewall is installed and configured is the WAN ping response in the router. A lot of manufacturers tend to have this set to respond by default. preventing this responce goes a long way to improving security

 

[FranzB]

I have you tried this site?

https://www.grc.com/x/ne.dll?bh0bkyd2

Yes, i know the site and the leak test. As far as i know all firewalls fail the GRC test except ZoneAlarm which is, however, a real pain in the neck and not just inconvenient to use.

Where did mine fail?

View attachment 175729

View attachment 175730

View attachment 175731

View attachment 175732

-------------
Those are the port scans. How about the Leak Test? Different story probably.

 

[FranzB]

The one vulnerability I often find on systems where a good firewall is installed and configured is the WAN ping response in the router. A lot of manufacturers tend to have this set to respond by default. preventing this responce goes a long way to improving security

-------------
What about the ping test on www.h-online.com/security ? Under toolkits.

 

[bigcitycat]

I trust my router firewall.

 

[Barman58]

The one vulnerability I often find on systems where a good firewall is installed and configured is the WAN ping response in the router. A lot of manufacturers tend to have this set to respond by default. preventing this responce goes a long way to improving security

-------------
What about the ping test on www.h-online.com/security ? Under toolkits.

That test doesn't see a device at my address

 

[FranzB]

What about the ping test on www.h-online.com/security ? Under toolkits.

That test doesn't see a device at my address

Ok.

To Bigcitycat: Trust is good but checking is better

 

[bigcitycat]

Sure! I configured it. It's wpa2 with stealth ports. I have Norton internet security too. I'm just saying the best firewall is a properly configured router. At least for incoming anyway.