ICMP need to know

[john ranger]

I have tried this test at
http://grc.com/x/ne.dll?bh0ciyl2

And all was stealth but not the ICMP. Should I be concerned with this? If so how do I turn it off.
Thank you

[Cricket]

Which software firewall are you using?

Cricket

[john ranger]

Just the Microsoft standard with XP pro

[Cricket]

Have you installed all the critical updates?

Cricket

[john ranger]

yes i have.

[snakeyes]

the commands "ping" and "tracert" use functionality from ICMP.

[john ranger]

I take it no one has an answer for me I guess?

[Statica]

Personally, I would use a router for a broadband connection and then enable a feature called DISCARD PING ON WAN SIDE (it's there on all routers).
The problem with software firewalls, especially for ICMP or requests, is that it still uses up your computer's CPU to drop a packet. Which is pretty useless if you think about it. A software firewall is great to close up holes.
A ping is a request that allows someone to get a response from your computer. It not only allows someone to detect that a particular IP (aka your computer) is "alive" but it also opens up more issues such as ping floods etc.

[john ranger]

Originally posted by Statica Personally, I would use a router for a broadband connection and then enable a feature called DISCARD PING ON WAN SIDE (it's there on all routers). The problem with software firewalls, especially for ICMP or requests, is that it still uses up your computer's CPU to drop a packet. Which is pretty useless if you think about it. A software firewall is great to close up holes. A ping is a request that allows someone to get a response from your computer. It not only allows someone to detect that a particular IP (aka your computer) is "alive" but it also opens up more issues such as ping floods etc.

I have a wireless set up with three computers,what firewall unit would you suggest for my network. Thanks

I use cable

[Statica]

What are you using for your wireless hardware. Is it an ad hoc network? Please give us details of your current network setup.
Typically, I'd recommend a router+wireless AP of the same mfger/wireless chipset as what you already have.

[john ranger]

Originally posted by Statica What are you using for your wireless hardware. Is it an ad hoc network? Please give us details of your current network setup. Typically, I'd recommend a router+wireless AP of the same mfger/wireless chipset as what you already have.

I have next to no experience so please keep it as simple as possible. Thanks

I'm using US Robotics with these components

http://www.usr.com/products/networki...sp?sku=USR8022

http://www.usr.com/support/product-t....asp?prod=2216

[Statica]

Hi John :
The product USR8022 is a router (and a very good one at that), and it does have the feature I mentioned.
To activate it,
1) log in to your router's configuration pages
2) Click on the Advanced settings
3) Check mark the enable box for the setting DISCARD PING FROM WAN SIDE
4) Then save it.

If you wish to see a step by step on how to configure your router and to check various settings check out the online manual - I just did - http://www.usr.com/support/8022/8022-ug/three.html (scroll down to the Miscellaneous Items section)

After you are done, you can verify it from the grc.com site again.

---

Other than that, I also wrote a little note on a rough checklist of what you should be doing to secure your network, mind you - the grc site is great, but it should not make you think that you are 100% secure, the checklist is here: http://forum.pcmech.com/showthread.p...threadid=82079

If you require assistance with the implementation of any of these lock-downn feel free to post back.

[john ranger]

Well thank you very much that is totally helpful. Thanks for your time and effort. Much appreciated.
John

[john ranger]

Thanks to you I'm looking good

[Statica]

Again, I post this to reiterate - it by no means, implies that you are entirely secure, especially on a wireless network. Proceed and take harder protection.

[john ranger]

Statica

I had to reboot my USRobotics and I forgot the settings I had for the 133 port that keeps showing up at
http://grc.com/x/ne.dll?bh0ciyl2

Can you help me with that?

Check att I forgot what to put in.

Thanks

[john ranger]

Opps here is the att

[john ranger]

Statica

I had to reset my (US Robotics) and it wiped all my settings, I forgot the settings to eliminate port 133 port that keeps showing up at
http://grc.com/x/ne.dll?bh0ciyl2

Can you help me with that?

Check att I forgot what to put in.

Thanks