Re: ISA server and Gibson's LeakTest
From: James Grant (nospam_at_nospam.com)
Date: 08/12/03
- Next message: David Thielen: "adv: Software firewall with sourcecode"
- Previous message: Kristóf: "Setting up one firewall on two PC's"
- In reply to: Netmasker: "ISA server and Gibson's LeakTest"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 11 Aug 2003 23:45:23 GMT
Netmasker wrote:
>
> I run ISA Server SP1 server on win2k and my "IP Packet Filters rules"
> explicitly declared that only Outbound DYNAMIC TCP and UDP traffic is
> allowed. But when I run the Gibson's "LeakTest" utility it successfully
> connects to Gibson's web site. So ISA server seems to allow outbound http
> traffic.
> My first question is what "Dynamic" stands for as far as outbound
> connections are concerned. Is my configuration wrong or ISA server can't
> manage outbound connections properly ?
Apparently LeakTest is "Dynamic" ;-)
> My second question is which firewalls (if any) get LeakTest to fail ??
I think you're worrying about the wrong stuff.
Leak tests are trojan prototypes that demonstrate potential ways
(at the time of their creation) for apps to circumvent personal
firewalls and get information out. Each one proves again that
personal firewalls are limited at least when it comes to protecting
you from malware on your system. When they come out, personal firewall
vendors compete in a game of catch up and PCFlank runs a beauty contest
to rate how well they've done.
You want to keep your system clean and running good and current
anti-virus.
Also, you have a server, so you should not be running unnecessary
things on it. Your risk of getting a trojan should be low to zero.
You should be more concerned with incoming threats. Run nmap or some
other test to see your system as hackers see it.
James Grant
8Signs Ltd.
http://www.8signs.com
- Next message: David Thielen: "adv: Software firewall with sourcecode"
- Previous message: Kristóf: "Setting up one firewall on two PC's"
- In reply to: Netmasker: "ISA server and Gibson's LeakTest"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
