Firewall tester

[Wargasm]

Is this proggy for real ?
i did test on 3 firewalls and it told me they where all worthless hehehe
did not give my hardware firewall a try (will do)

Zone Alarm pro was breached
Zone alarm free version was breached
Sygate Pro breached

I wonder what kinda results u ppl get .



http://www.tooleaky.zensoft.com/

 

[Arta]

Yes, it's for real, sorta. It's certainly a valid technique for penetrating firewalls like ZA, however, that doesn't mean the firewalls aren't doing what they're supposed to do. The firewall is in fact working perfectly, this program simply masquerades as a trusted app (IE) and uses that app to transmit info. It's clever and it does mean that someone who wanted to could get around firewalls, but it doesn't remove the point in having one, since any app that hasn't been specifically designed to get past firewalls would still be blocked. Hardware firewall won't make any difference either - it would be breached too.

 

[Wargasm]

i still have to check with a packet sniffer but from little i saw it does indeed us IE it makes a udp connection with 127.0.0.0
then it opens up port 80 using IP 0.0.0.0.0 and then it connects to their server ip.
let's see what happens if i deny IE to use the web.

 

[Wargasm]

U deny IE to access the web and use the util u get the following msg .
There was apparantly no leak, your intern connection is very slow. Or most likely (hence the words most likely) the grc.com website is down.

another util from grc.com and co to scare the shit out of ppl .
This means if you use internet explorer any firewall get's breached.

A simple outbound block to the server where the info is collected will do the trick . Course this is no solution.
The bs on that page that ZA will block it is a lie

 

[BarbForLife]

tiny personal firewall! no leak!!! yay!!!

 

[Dabom]

Tiny Personal Firewall leaks, just like every other one.

 

[Wargasm]

Barb wich OS and wich version of IE u use ?

 

[cloudberry]

I'm a real dare-devil. I don't use a firewall anymore. My building has a hardware firewall, that's enough for me.

 

[BarbForLife]

i run under windows 98 and i have ie version 5.00.2614.3500

 

[Swilo]

Originally posted by cloudberry
I'm a real dare-devil. I don't use a firewall anymore. My building has a hardware firewall, that's enough for me.

That's how it is in the college dorm, except people within the LAN can still do stuff. Only happened once, and isn't worth running a firewall while there.

 

[cloudberry]

I live in a dorm, in my "subLAN" there are about fifty computers. There are 2,500 computers on the entire LAN, but we have separate hardware firewalls and gateways for each subnet. My school also offers free AV (F-secure) and pro-licenses for ZA, but I don't use it, since I turn it off all the time anyway when I play or something... Some people say that the computers on our LAN is desired by hackers, since we have a lot of bandwith. Right now I have this very stable T1 line (10 Mbit/s), but there is a science project, called GigaSunet. Sunet stands for Swedish University Network, and you all know what giga stands for . This won't get us higher speeds, but less packet loss and the speed won't differ depending on the number of people online anymore.