Forum Home
Press F1
 
Thread ID: 100084 2009-05-25 22:45:00 Computer/s Answering Pings. pipercub (7089) Press F1
Post ID Timestamp Content User
776855 2009-05-25 22:45:00 My computer / firewall has developed a strange problem. I`m running Win XP SP3 on Telstra Clear cable broadband. The modem is connected to a wireless router. My computer connects to the router by cable. My sons` computer is connected to the router by wireless.
Problem: I am running Comodo Firewall which, up until now, has tested perfectly when tested at www.grc.com `Shields Up` However, yesterday when testing I got a result where all ports tested were `stealthed` but the test failed because my computer answered their `ping` which is, apparently, not a good thing. The test results are printed below:


Solicited TCP Packets: PASSED — No TCP packets were received from your system as a direct result of our attempts to elicit some response from any of the ports listed below — they are all either fully stealthed or blocked by your ISP. However . . .

Unsolicited Packets: PASSED — No Internet packets of any sort were received from your system as a side-effect of our attempts to elicit some response from any of the ports listed above. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system remained wisely silent. (Except for the fact that not all of its ports are completely stealthed as shown below.)

Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation.

GRC Port Authority Report created on UTC: 2009-05-25 at 07:50:55

Results from scan of ports: 0, 21-23, 25, 79, 80, 110, 113,
119, 135, 139, 143, 389, 443, 445,
1002, 1024-1030, 1720, 5000
0 Ports Open
0 Ports Closed
26 Ports Stealth
---------------------
26 Ports Tested
ALL PORTS tested were found to be: STEALTH.
TruStealth: FAILED - ALL tested ports were STEALTH,
- NO unsolicited packets were received,
- A PING REPLY (ICMP Echo) WAS RECEIVED.

I tried the same test with two other computers. One running Comodo and the other running the latest Zone Alarm. Both connected by cable to the router one at atime. Same result so does not appear to be a computer or firewall fault?
Finally, I uninstalled Comodo on my main computer and did the test again. I got the same resault as above. It would appear that, maybe, I don`t need a software firewall. Could anyone give me a hint what could be answering the ping sent by GRC?

The Router is a Linksys Model WRT5463G ver. 1.1 & the Modem is a Motorola `Surfboard` Model SB5100i.
As I said, everthing has worked ok up until yesterday. My son set up the router some months ago Unfortunately he`s away for a while so can`t ask him about anything. I`m afraid I know nothing about seeting up a router. Any
help would be much appreciated! Cheers:
pipercub (7089)
776856 2009-05-25 22:56:00 Thats normal, I used to get the same thing (the ping thing) till I went into the LAN properties / TCP/IP / properties / advanced / WINS tab and changed it from default to enable NETBIOS over TCP/IP. Since I use static IP's (on this network, not through Xnet). Altho, I'm not using a firewall (beside the router's, and XP's). Speedy Gonzales (78)
776857 2009-05-25 23:41:00 Thanks Speedy

TCP/IP is set to `Obtain an IP address automatically.` and `Obtain DNS server automatically`.
Alternate Configuration is set to ``Automatic private IP address`.
pipercub (7089)
776858 2009-05-26 00:27:00 You could try giving them their own ips. Up to you. Dont know if changing it to NETBIOS over TCP/IP will make any diff, if they're not static Speedy Gonzales (78)
776859 2009-05-26 01:01:00 Thanks again. I`ll try that. Still can`t understand why it`s suddenly gone like that when it`s been fine up until yesterday. pipercub (7089)
776860 2009-05-26 01:41:00 it might be in your router config, you can set the broadband router to not reply to IMCP ping packets sent to it. it may be in the remote management page or advanced settings on the broadband router williamF (115)
776861 2009-05-26 02:24:00 It's your router that's responding to pings, not your PCs. inphinity (7274)
776862 2009-05-26 04:09:00 williamF:
"it might be in your router config, you can set the broadband router to not reply to IMCP ping packets sent to it. it may be in the remote management page or advanced settings on the broadband router"

I`ve no idea how to get into the router configuration. My son set it up originally but he`s in Aus. fo a couple of weeks. May have to wait until he gets back. Thanks.

inphinity:
"It's your router that's responding to pings, not your PCs."

Thanks. I figured that was probably the case getting the same result on three PCs` and two software firewalls.

Thans again all.
pipercub (7089)
776863 2009-05-26 04:20:00 xp: open start menu click on run type "cmd" (without quotes) then type in ipconfig
the address in "default gateway" will be your broadband router's address
in a browser type http://[default gateway address] and at the login prompt enter the username admin and (if you know it) the password try the defaults (admin or password) and have a look

vista: in the start search box type cmd and click cmd.exe or press enter the rest is the same as XP
williamF (115)
776864 2009-05-27 08:23:00 Hi All

Happy to say problem fixed. Got Son in Aust. to email user name and password. Opened router setup and, under security heading, enabled "Block Anonymous Internet Requests". Went back to www.grc.com and retested. All secure. (at least according to grc.) Which begs the Question, Is a software firewall necessary? I suppose that a belt and braces approach doesn`t hurt. Well.... thanks Speedy, williamF & inphinity for all your help.
Until next time! Cheers:
pipercub (7089)
1 2