hobbit monitor
+ Reply to Thread
Results 1 to 6 of 6

Thread: Firewall leak tests

  1. #1
    Join Date
    May 2001
    Posts
    218

    Firewall leak tests

    [url]http://www.pcflank.com/news08**0*.htm[/url]

    and more

    [url]http://www.looknstop.com/En/leaktests.htm[/url]
    Blacksheep

  2. #2
    Join Date
    Nov 2001
    Posts
    68
    Nav passed except for the privacy test.

    Opera passed all with flying colors, including all the exploits test.
    I was using Tiny. Didn't want to try with Sygate as I haven't had time to configure it properly yet.

    Thanks for the links, Blacksheep.
    Openly covert.

  3. #3
    Join Date
    May 2001
    Posts
    218

    Firewall leak tests

    *] Tested TooLeaky and Firehole on MSIE 5.0*, Sygate PF Free:

    TooLeaky made not a dent- no packets in or out.

    Firehole bored right thru- Here's CommView sniffer reconstructed TCP session (with xs strategically placed to cover my private parts):

    Message from user "current user" on computer C*F4Z2 [xxx.xxx.86.*60] at *2/28/0* *7:02:*4
    ***** I have successfully bypassed the personal firewall! *****

    HTTP/*.* 400 Bad Request
    Date: Fri, 28 Dec 200* 2*:02:*4 GMT
    Server: Apache/*.*.*4
    Connection: close
    Content-Type: text/html; charset=iso-885*-*

    <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
    <HTML><HEAD>
    <TITLE>400 Bad Request</TITLE>
    </HEAD><BODY>
    <H*>Bad Request</H*>
    Your browser sent a request that this server could not understand.<P>
    Request header field is missing colon separator.<P>
    <PRE>
    ***** I have successfully bypassed the personal firewall! *****</PRE>
    <P>
    </BODY></HTML>

    2] Tested TooLeaky and Firehole on MSIE 5.5, Sygate PF Pro 5.0 beta with all Options> Security tab> checkboxes checked:

    Tooleaky reports "Success!" True. CommView sniffer and SPF Pro recorded packet traffic between my PC and Tooleaky target grc 207.7*.*2.*** so firewall breached.

    Firehole reports "failed to connect Failed to send message" True. SPF Pro popped a flag on IE saying a dll might have been loaded, will I allow connect. I said no. No packet traffic.

    Hmmm...
    Firehole breached SPF Free but not SPF Pro 5.0 beta.
    Tooleaky breached SPF Pro 5.0 beta but not SPF Free.

    Conclusion:
    IMHO one must use sniffer to know for sure when running these tests. All of these firewall leak tests require code running in one's PC. If rogue code gains entry to one's PC one is probably dead meat anyway if programmer is good.

    What to do? Don't get any trojans and hope firewall vendors plug the holes.

    Sleep tight.
    Blacksheep

  4. #4
    Join Date
    Nov 2001
    Posts
    68
    [url]http://www.morelerbe.com/cgi-bin/ubb-cgi/ultimatebb.cgi?ubb=get_topic&f=*7&t=000*72[/url]

    Please note that there are 4 pages.

    (After reading this, I suppose that LooknSee is the FW of choice...?)
    Last edited by Nulland Void; 12-29-2001 at 02:23 AM.
    Openly covert.

  5. #5
    Join Date
    May 2001
    Posts
    218

    Firewall illusions

    Nulland Void:
    "http://www.morelerbe.com/cgi-bin/ub...c&f=*7&t=000*72 "

    Disturbing! Ignorance is bliss.

    "Please note that there are 4 pages.

    (After reading this, I suppose that LooknSee is the FW of choice...?) "

    Look 'n' Stop [url]http://www.looknstop.com/En/index2.htm[/url] is now at the top of my agenda of firewalls to test. Have hopes Sygate will get their act together for SPF to block all firewall leaks including nonstandard packets.

    Thanks for post Nulland Void.
    Blacksheep

  6. #6
    Join Date
    Nov 2001
    Posts
    68
    Yeah right, LooknStop. (no wonder I had such a hard time finding it at Google!)

    My computer is becoming very depressed and threatens to commit suicide unless I go back to Linux.
    Openly covert.

+ Reply to Thread

Similar Threads

  1. is there a firewall?
    By Unregistered in forum Proxies and Firewalls
    Replies: 1
    Last Post: 11-26-2003, 04:01 PM
  2. Internet Connection Firewall and Basic Firewall Do Not Block
    By DATA in forum Proxies and Firewalls
    Replies: 0
    Last Post: 06-03-2003, 05:58 AM
  3. Did you say Firewall ?
    By fEš·.·šEr in forum Proxies and Firewalls
    Replies: 2
    Last Post: 06-19-2002, 06:30 AM
  4. Need help getting around firewall
    By Unregistered in forum Proxies and Firewalls
    Replies: 13
    Last Post: 04-10-2002, 09:27 AM
  5. Firewall for Mac OS *
    By Unregistered in forum Proxies and Firewalls
    Replies: 1
    Last Post: 01-02-2002, 08:51 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts