PDA

View Full Version : Outbound Blocking


Observer
01-14-2002, 06:31 PM
Hello, everyone. This is my first post. I've been reading off and on for several months, and been interested in Outpost as a replacement for my AtGuard for considerably longer. Until yesterday I hadn't tried it. I'm quite attached to AtGuard.

The main reason for considering a switch was the outbound leaks brought to light in recent months by apps such as Tooleaky and Robin Keir's Firehole. So I tried the Pro RC1 in Rules Wizard and allowing the IE browser rule to be preset by Outpost as a Partially Allowed Application. Outpost was installed on a relatively new machine with no prior firewall.

Tooleaky couldn't get through the firewall (unlike with AtGuard). However, Firehole went through with no warnings. The Allowed log showed it passing through port 80 -- as expected.

This may have already been discussed, as maybe some of the suggestions I'm posting in the Suggestions forum, but are the developers working on stopping these various outbound leaks that Robin and others have pointed out? I know I saw mention of stopping LaBrea. Are they waiting for Steve Gibson's Leaktest 2, which will demonstrate a number of exploits, before attempting to plug the other holes? I certainly see much to admire in Outpost, but again, my main concern before paying for it (actually, several) is whether or not this primary function is taken care of.

Observer

Mikhail
01-14-2002, 10:18 PM
This may have already been discussed,
Yes, many times. Please use Search (http://www.agnitum.com/forum/search.php?s=)
are the developers working on stopping these various outbound leaks
Yes, we do.
Are they waiting for Steve Gibson's Leaktest 2
No, we are not waiting for leaktest-2

Observer
01-15-2002, 02:04 AM
Thank you both. I can see that this problem would be a tough one to fix. And certainly, having other security programs is a necessity. It seems like at this point perhaps the best solution is just to not trust any program and make it ask for access. Though that would be too much of a hassle for the browser with as many connections as it makes.

I guess all the firewalls are a little vulnerable at this point, so it looks to me like Outpost with all of its features is the one to beat. So far I haven't had any problems with it.

Observer

chrisclu
01-15-2002, 03:34 AM
It will be an ongoing cat and mouse game. As exploits are discovered, they will be closed. But I think you will find OutPost to be the best cutting edge firewall.

chris