BitDefender's FireWall in the Security Suite isn't Keeping YOU safe - here's why...
BitDefender, I have tested your firewall with the GRC's Firewall Leak Test available here:
http://www.grc.com/lt/leaktest.htm
When LeakTest.exe tried to connect, it was denied, meaning that BitDefender's firerwall had
blocked the test, which is good. However, I gave a program called Trillian rights to
connect and act as a server. I renamed the original Trillian.exe to Trillian-orig.exe. I
then renamed LeakTest.exe to Trillian.exe and ran it. Unfortunately, it was given full
permission, showing that the firewall could not block GRC's leak test. This is bad because
if a virus were to rename an exe program that is given full access to the internet, it would
be allowed. If each program were assigned a "Cryptographic Signature" by your firewall,
this would fix the issue. If that file tries to connect, this signature is then regenerated
and compared before any program of that name is again allowed access. This completely
prevents this simple form of trusted program impersonation, but NO OTHER FIREWALLS OFFER
THIS CAPABILITY EXCEPT ZoneAlarm. Therefore, I strongly insist that your firewall is
upgraded to meet all of GRC's standards as a firewall. I also request as a feature request
that your firewall show how many intrusions have been blocked. Until this firewall is
updated and improved, I don't think I'll use it.
Users of BitDefender's Internet Security Suite 10:
From this test, you are not safe when using BitDefender's firewall!!
Comments
-
Hi Eric
You also posted this in the Feature request area wich is more appropriate so i'll close this one.0