I was testing my new firewall (Kerio 4) on GRC and it keeps telling me that poret 1025 is open, even though I have my packet filter settings set to block both Local ports 1024-1030 and Remote ports 1024-1030.

What could I be doing wrong?

Also, on a side note, could somebody teel me which of these I should allow/block? Sadly, I don't think Kerio will let choose to be asked when each one is need if I want to allow or block it:

ActiveX
JavaScripts
VBScripts

Thanks.

You might have a program that you allowed Kerio permission to access for port 1025. I would do a Google search for the programs that use 1025. If you want to change the settings for activeX, java and vbs you use the advanced setting of tools>internet explorer. Keep in mind that your ability to surf the net will be dramatically impacted. There seems to always be a tradeoff between security and user friendliness.

Thanks.

I just detected and removed a Java virus, but I won't disable Java as most sites use it.

You could set them to prompt. Each time you visit a website you will be prompted to allow,deny. Take care and all the best!

Port 1025 is open in a listening state by default in XP. Apparently Task Scheduler has a remote function that may keep this port 'open'. Try disabling task scheduler through Run>services.msc
and re-run the grc.com scan to see if it becomes stealthed.

For the scripts etc > follow capt's good advice.

Thanks for the advice.

Capt, Kerio will not let me choose to prompt, that's why I need to know which ones to permanently block/allow.