i went to grc website and i saw that 1025 port is open but when i turn of avast antivirus with the
help of msconfig . all ports were stealth is it normal
that avast uses 1025 port
To answer the header (topic) question, many here use Kerio firewall. I use ZoneAlarm free. I have been visiting the GRC site for a few years now. In fact, I was just there last month for a Stealth! retest. With avast! running, my computer was in full stealth mode with no ports open. 
Perhaps there is some setting in the Kerio firewall you can change. I have never used Kerio so I do not really know. ???
Hmmm, this is interesting.
I thought that Avast alone was safe enough.
Maybe I should get a firewall too. 
(I’ll have a look at that Kerio one)
I suggest you do not ‘start’ with Kerio… It’s not so easy to learn.
You can try ZoneAlarm (free) or Sygate Personal Firewall first 
I use Kerio and avast, all my ports are stealth.
You can create a rule for the 1025 port in kerio.
yes…i guess zonealarm is much more dummy-proof…that’s why i use it ;D
I would suggest outpost firewall by agnitum. ;D