Shields Up Test Fails

[MushroomHead]

Hello,

I tested Outpost Security Suite using Shields Up website and it failed the test with the message following message :-

Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation.

How do I block ping reply messages? I tried disabling all the ticks for ICMP settings under Network Rules (ICMPv4 and ICMPv6) but none of this work. I am using the latest OSS 2009 (Feb 14 update) and I am on a wireless Netgear router.

Secondly, can someone tell me what "content filtering" does? I have noticed disabling content filtering allows me to download files in internet explorer and enabling it stops any download. Is content filtering something to do with ad blocking or does it constantly watch data flowing in and out of the machine checking for malicious/abnormal data packets??

[kronckew]

have a look at Online Scans - What to do with Open and Closed Ports
icmp is also mentioned in A Guide to Producing a Secure Configuration for Outpost

content filtering filters http traffic looking for ads, activex, scripts, flash, etc. it's the web control in action. also checks for malware ebedded in the http stream. does not check encrypted (https) traffic. for programs where filtering would be inappropriate, like p2p or d/l apps, update apps, etc. it can be turned off on a per app basis in the app rules options.

[150d]

Originally Posted by MushroomHead

How do I block ping reply messages?

Why would you want to? Just because grc.com sys so?

How are you connected to the internet? If you're using a stand-alone router then the ping sent through the internet will be answered by the router (if it is so configured) and not even reach your computer.

Again, don't bother. This is not a problem.

Regs,
150d

[MushroomHead]

Thanks, I was just concerned because Shields Up said the portscans it did has "failed". Yes I am using a standalone ADSL router (Netgear DG834GT) and connecting wirelessly using a usb adapter. As I understand it (after doing some searches on the internet), this is nothing to worry about so its probably the router thats configured to do this by the broadband provider.

[kronckew]

most routers will have a configuration setting that allows you to turn off ping response, my belkin does:


some ISP's may ping you occasionally to ensure you are still there, and may drop the connection if you do not respond, so if you 'stealth' the router and have problems, you may need to reset it.