Grc Leak Test Failed

Hello
I have Windows 1607 and use Defender with MBAM
I failed the leak test.
I also have an ISP' s router which is a firewall too, correct?
So all three, in tandem, have failed the test.

Should I use GlassWire, Windows Firewall or leave it as is?

I found the alternatives to be hard for a medium level user.

I read where others are having issues with 1607, like Zone Alarm etc.
TY
Peter

 

I have no confidence in anything from GRC any more. The so-called 'leak test' is 12 years old.
I have more confidence in the reviews of FW security at Matuosec. The inbuilt FW in Windows 10 is pretty good but I still prefer Comodo
as it is consistently highly rated and, as long as it is configured correctly, involves very few pop ups for permissions.

 

I find GRC to still be a viable resource . . . the leak test still does what it was designed to do. The site indicates it was updated this year, but no indication on the status of the individual tools. At any rate no one should rely on just one security testing tool.

I have never trusted the Windows built in firewall, though it is better than nothing (and most novice users would have nothing if not for it). I've used ZoneAlarm for years and have been happy with it. I also use Comodo on a few PCs I have responsibility for and find it to be a fine firewall. Seems to have a smaller footprint then most.

Your ISP probably issued you what they call a residential gateway, which is a modem and a router combined. You should be able to access the router settings and make sure the router firewall is active and configured properly for your usage. I had UVerse for a while, and the gateway they forced on me was marginal at best, and it's settings were not configured properly for me. I ended up putting it in bridge mode and using my own router.

I suggest to the OP that in addition to what he is currently using he add Spyware Blaster (http://www.majorgeeks.com/files/details/spywareblaster.html), and SuperAntiSpyware (http://www.majorgeeks.com/files/details/superantispyware_free.html) and keep them updated and run them on a regular basis. I find these programs, in combination with MBAM and a good software firewall, catch or keep most net nasties away.

 

I use Comodo IS on 4 systems, have for many years. I consider it to be the best freeware.

 

Thx Peterr for this thread. You reminded me of something I needed to do ... check my Modem-Router and my firewall. Don't assume your
hardware FW is turned on. Recently, I replaced my Modem-Router and discovered yesterday, the FW was off by default and it was running NAT only. I ran Gibson's "ShieldsUP! and found several crucial ports wideopen. I set the Modem FW to medium, which not only closed those ports, but attained full "stealth". I also ran LeakTest, which my software FW failed, too. Made some adjustments and now it passes. See GIbson here:https://www.grc.com/default.htm
Gibson's tests were never meant to show how great firewalls are, but to identify some basic weakness open to exploitation. The same basic exploit tactics are still in use today. So, the tests are still valid for what they show.
Since I don't run Win 10, I am not up on what control features, you get with Win 10 FW ... probably not much. You might find Window Firewall Control 4.8.8.0 very helpful. It has made things easier for me, using the Win 7 FW. See:http://www.majorgeeks.com/files/details/windows_firewall_control.html
I'm not familiar with GlassWire, soz.

 

peterr...

You might like to take a look at Private Firewall. It passes the leak test with the added confidence that each process seeking to connect generates a pop up alert, giving you the choice to control what is connecting. The hard part for me has been controlling what Microsoft is up to. That's tricky, because applications like svchost and task scheduler are used for many different purposes. PF has given me a leg up on things, though.

If you don't like the HIPS, you can turn that element off and just used PF to control net connections. I like that I can completely shut off IE and other OS elements with the HIPS, since I never use those functions. I can also block elements of programs which is great, like Keyboard monitoring. All the while I can still block program connections. PF's log is pretty interesting too. For an app that doesn't get updated, PF is still very much relevant. Credit to the design team and only 10 MB to install with low memory draw and processor usage.

BTW, I used Glasswire, and it's a nice tool for monitoring purposes. You can really see what's using the net and how much. You also get a log of specific IPs. I don't think it's a great firewall, as it doesn't give access to the elements of, for example, svchost.exe for element specific control. It does do a good job with apps, though. I removed it because it was a little bit over the top for me. GW collects alot of information to support its functions, and it's not what I would call a "small" footprint app.

By all means, check your router settings. Big pluses for that advice...

 

I reevise my post #5 above. Instead of Windows Firewall Control, I suggest TinyWall to assist using the Win FW. Its more user friendly and a
better GUI. I found good writeups on the net as well. http://www.majorgeeks.com/files/details/tinywall.html;)