Smoke and Mirrors

[Ralph]

I thought I had solved my firewall problems but it's not that easy . I have a Netgear router set at WEP 128 security , Outpost set to block most , Proxo , and StartUp Monitor ; ran GRC's Leaktest and Shields UP and every thing closed . Feeling reassured and secure I downloaded ToolLeaky from http://www.firewallleaktester.com/leaks/tooleaky.exe and failed ! When they want to getcha , they'll getcha !

[Oddysey]

Ralph;

Need more details, please.


Oddysey

[ProxRocks]

Yeah, that "tooleaky" app is meaningless...

It uses a .dll file to access the internet via your default browser on port 80 by way of the browser's "MD5"...

Which means, if you have a REAL firewall, the leak checker FAILS, meaning your firewall prevented the app from "piggybacking" on your browser's .dll files...

I use Norton Internet Security 2004 and have it set up to monitor "Program component monitoring" and "Program launch monitoring"...

And "tooleaky" does not "get out" - NIS will not allow it to use an external module (ie, a .dll that "belongs to" Internet Explorer, in my case)...

"tooleaky" says that "There was apparently no leak, your computer or Internet connection is very slow, or, most likely, the GRC.COM website is down temporarily. Please try again later."

Um, wrong... My computer PREVENTED the app from "hooking" onto IE... Nothing is "slow" on my connection... Ping shows GRC.COM is alive and well... My computer simply would not allow this useless app to "do it's tricky stuff"... So it tries to DECEIVE me by saying there's STILL something wrong, be it a slow connection or a temporarily down site...

Going to take a LOT more than that to "fool" me... "tooleaky" is nothing but pure DECEPTION...

When it comes to firewalls, you get what you pay for...
I myself will NEVER rely on "freebies" like ZoneAlarm or Kerio or Outpost or you-name-it... And I guess YOU just have proven my point by pointing out this "tooleaky" app - which MY firewall would not allow to function...

Internet security is not a joke - if you want REAL protection, you must pay for it...

If "piggybacking" or "hooking" is a concern, get a REAL firewall and you will be safeguarded...

[Ralph]

Oddysey , I am running Win 98 se with Java , scripting , and of course Active X disabled ; pretty much following the recommendations of that great guru HP . I am running Trojan Guard , E-Trust AV monitoring in addition to Startup Monitor , Proxo , and Outpost 1.0 freebie . I feel so locked up I can barely urinate But , I think ProxRocks is on the money . You get what you pay for in firewalls . Very nice post ProxRocks ; I'm feeling better with my configuration and glad to hear your opinion of Tooleaky 's black magic . Although , Proxomitron is a security program and freebie that I doubt any of us would be without . ( Thank you , Scott , wherever you are ) .

[ProxRocks]

Ah, good point about Proxo...

But Proxo is not being relied upon for "security"...

For "privacy", yes - ie, JakxPack, webbugs, tracking links, et cetera...
And for "cosmetics" - ie, flash, marquee, alternate displays, et cetera...


And you are absolutely correct - Proxo is my "bestest" program, and it is a POWERFUL freebie... But none of us would go without an antivirus program or a firewall just because we are using Proxo...

[Ralph]

I guess should have used the word privacy rather than security . OTOH , JakXPack spoofs ip addresses and it seems to me to surely keeps the bad guys running in circles ! Long live Proxo !

[besafe]

Tooleaky is pretty ancient and simple. My firewall can prevent code injection and can prevent all the tests at the site linked. Give them a try and see how you fare.

http://www.firewallleaktester.com/