瑞星卡卡安全论坛

哥哥又更新了！我刚回来！马上就更新谢谢

引用:

【taylor05771的贴子】 属正常UPNP较为危险,不建议使用 关于报警的事情 改了一下规则 报警已经取消 请重新下载,导入 ...........................

引用:
【普通人的贴子】安装了楼主的防火墙规则后不上网也会报警：UPNP服务漏洞192.168.1.152是正常吗？
楼主UPNP服务漏洞报警现在是否是正常的？

对啊，我的机子也是这样，是不是系统有漏洞啊？

好久没来了，差一点要放弃瑞星了。但楼主和寿宁的态度让我打消了放弃瑞星的念头。谢谢楼主、寿宁等乐于助人的人。卡卡社区因有你们而更加美丽！！！

我是新手刚刚接触电脑,什么也不懂,来这里看到这么多好人真是感动.楼主、寿宁等乐于助人的人,真是大好人,向您敬礼了!

谢谢大家的支持
有问题可以反馈
您的反馈是我们改进的重要一句

楼主你的规则虽然不错..但是还是通不过sygate的检测啊.国外的一些防火墙均能通过.lns,mcafee,outpost,za.以上的本人测试过.其他的就不清楚.检测完.用瑞星的墙曲测试大部分显示端口关闭.不是要隐藏才算安全吗?

引用:

【天命主宰的贴子】楼主你的规则虽然不错..但是还是通不过sygate的检测啊.国外的一些防火墙均能通过.lns,mcafee,outpost,za.以上的本人测试过.其他的就不清楚.检测完.用瑞星的墙曲测试大部分显示端口关闭.不是要隐藏才算安全吗? ...........................

可能 你有路由 或是用某种外挂引起
我们测试正常

引用:

【taylor05771的贴子】 可能 你有路由 或是用某种外挂引起 我们测试正常 ...........................

不会啊.用其他防火墙测试均正常.scan.sygate.com 进入后选quick scan,显示大部分为关闭.我是ADSL上网,没设路由,从来不用任何外挂.

请问楼主只为瑞星防火墙写了规则吗?
若是别的防火墙如天网等可以用二位的规则包吗?

我们测试全是隐藏

引用:

【天命主宰的贴子】楼主你的规则虽然不错..但是还是通不过sygate的检测啊.国外的一些防火墙均能通过.lns,mcafee,outpost,za.以上的本人测试过.其他的就不清楚.检测完.用瑞星的墙曲测试大部分显示端口关闭.不是要隐藏才算安全吗? ...........................

我重新测试了，全部是隐蔽!
图1：

附件: 1405942005711221736.JPG

我重新测试了，全部是隐蔽!
图1：


附件: 1405942005711221929.JPG

我重新测试了，全部是隐蔽!
图3（楼上的是图2，打错字，不好意思）：



附件: 1405942005711222032.JPG

我重新测试了，全部是隐蔽!
图4：




附件: 1405942005711222117.JPG

但是我的机器
在Sygate检测中 有很多都是关闭啊
在诺顿安全检测中 就是隐身
如图：



附件: 4148762005711222230.JPG

我重新测试了，全部是隐蔽!

还有很多呢，我想不用再贴图了吧，结果都是一样的！

有些是隐藏

附件: 4148762005711222407.JPG

我的

附件: 2634232005711222530.jpg

附 

诺顿 Sygate 天网 在线安全检测

诺顿安全检测
http://security.symantec.com/sscv6/home.asp?langid=cs&venid=sym&plfid=23&pkj=NHCBNCAZRGSROFQIMCV

Sygate在线检测
http://scan.sygate.com/prequickscan.html

天网防火墙
http://pfw.sky.net.cn/news/?sessid=

导入规则后以前的漏洞没了

附件: 2634232005711223621.jpg

附件: 2634232005711223830.jpg

我的结果也是隐藏

Ideally your status should be "Blocked". This indicates that your ports are not only
closed, but they are completely hidden (stealthed) to attackers. 



Service  Ports  Status  Additional Information
FTP DATA 20 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
FTP 21 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SSH 22 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
TELNET 23 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SMTP 25 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
DNS 53 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
DCC 59 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
FINGER 79 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
WEB 80 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
POP3 110 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
IDENT 113 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Location Service 135 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
NetBIOS 139 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
HTTPS 443 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Server Message Block 445 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
SOCKS PROXY 1080 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
UPnP 5000 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
WEB PROXY 8080 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.

Results from scan of commonly used trojans at TCP/IP address: 222.77.116.92

Service  Ports  Status  Possible Trojans
Trojan 1243 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 1999 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 6776 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 7789 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 12345 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 31337 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 54320 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.
Trojan 54321 BLOCKED This port has not responded to any of our probes. It appears to be completely stealthed.

Results from scan of ICMP at TCP/IP address: 222.77.116.92


Protocol  Type  Status  Additional Information
ICMP  8  BLOCKED An ICMP ping request is usually used to test Internet access. However, an attacker can use it to determine if your computer is available and what OS you are running. This gives him valuable information when he is determining what type of attack to use against you.

You have blocked all of our probes! We still recommend running this test both with
and without Sygate Personal Firewall enabled... so turn it off and try the test again.


除了ICMP8端口是我预留实行关闭以外，其他的都是隐藏 ！

【回复“寿宁”的帖子】同样

我测试多次,赛门铁克的全部通过但是sygate仍有部分是显示关闭.不知道是什么原因?

附件: 4150472005711234603.JPG

图2

附件: 4150472005711234809.JPG

图3

附件: 4150472005711234900.JPG

晕...关闭瑞星的墙.重新启用windows sp2防火墙,sygate测试完全通过.不明白.
难道瑞星的墙还不如windows自带的?几位大哥测试的时候是否同时启用了windows的墙跟瑞星的墙?

引用:

【天命主宰的贴子】晕...关闭瑞星的墙.重新启用windows sp2防火墙,sygate测试完全通过.不明白. 难道瑞星的墙还不如windows自带的?几位大哥测试的时候是否同时启用了windows的墙跟瑞星的墙? ...........................

我测试的时候还特地关闭了windowsXP -SP2自带的防火墙，我想一定是你的瑞星已经损坏或是安装了多个防火墙墙造成冲突。