 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 Reviews:
·Time Warner VOIP
2 edits | SMC ROUTER QUESTION I hadnt been to the GRC site in awhile,i just did a test now and I AM QUITE ANGRY!!
This thing responds to PING REQUESTS!!! 
I used to PASS that security test on GRC before i had this piece of garbage router!!
Anyone know how to stop the SMC ROUTER from responding to pings?? (It must be the router as my local firewall is stealthed on port 113 and will ignore the request (The firewall in the router is disabled))
Another reason for me to hate this piece of trash they stuck me with!! |
|
 ironwalker World RenownedPremium,MVM join:2001-08-31 Keansburg, NJ | Go into the routers security configuration and turn it off. |
|
 | reply to Dude111 Responding to ICMP packets is not a huge issue. Not scoring 100% a Steve Gibson test is even less of a concern.
As mentioned, login to the router (cusadmin/highspeed), turn off ICMP, and enjoy your evening.
 |
|
|
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 There is nowhere to disable ICMP!!
This thing is a piece of garbage  |
|
 Smith6612Premium,MVM join:2008-02-01 North Tonawanda, NY kudos:21 Reviews:
·Frontier Communi..
·Verizon Online DSL
1 edit | There's nothing wrong with ICMP. All of the modems my one of my ISPs hands out have the firewall disabled, and pretty much every one of my ISP's modems all reply to ICMP. I've had my modem replying to it for over a year now and recently set up a line monitor. I'm not getting DDoS'd/hacked at all, and I do host servers frequently for games and visit many sites. -- It's all fun and games in a Team Fortress 2 battle until your sentry gun is sapped by the Spycrab! |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 Yes but ya still like having the added security of not responding to any pings!! |
|
 Smith6612Premium,MVM join:2008-02-01 North Tonawanda, NY kudos:21 Reviews:
·Frontier Communi..
·Verizon Online DSL
1 edit | Well in that case, if you can't find any setting in your SMC to shut off ICMP/Anon Internet Requests, if you have a router already in place why not bridge the modem and use your router's firewall?
By the way if your ISP is Time Warner and you're using one of their SMCs, I did read a post saying that the firmware was just hiding options using either CSS or JavaScript. Might want to look into that. -- It's all fun and games in a Team Fortress 2 battle until your sentry gun is sapped by the Spycrab! |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 No i just have this SMC wireless piece of garbage......
It has DNS hijacking,etc...... (Took me awhile to get the DNS issues fixed (ITS JUST A PIECE OF CRAP)) |
|
 SYNACKJust Firewall ItPremium,Mod join:2001-03-05 Venice, CA Host: Networking Virtual Private Ne.. Netgear ZyXEL
| reply to Dude111 said by Dude111: Anyone know how to stop the SMC ROUTER from responding to pings?? (It must be the router as my local firewall is stealthed on port 113 and will ignore the request (The firewall in the router is disabled)) OK, cool down. Blocking ping requests does not add to your security. What makes you think it does?
Let's start from the beginning:
What is the exact router model number? What have you tried?
said by Dude111: Anyone know how to stop the SMC ROUTER from responding to pings?? (It must be the router as my local firewall is stealthed on port 113 and will ignore the request (The firewall in the router is disabled)) I don't understand how port 113 is connected to any ping response and how your local firewall is involved in this. Do you forward any ports? Can you explain?
Personally, I explicitly enable ping response on the router.  |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 You enable ping requests??
So your letting hackers,etc know your online??
Not a good thing my friend,you should try to be AS INVISIBLE AS YOU CAN!! |
|
 | reply to Dude111 Just go to Firewall > Intrusion Detection and in there check the 3 items referring to "Intrusion Detection Feature". Finally, in "Stateful Packet Inspection" check the 5 items as well. Your router will not respond to pings anymore. |
|
 SYNACKJust Firewall ItPremium,Mod join:2001-03-05 Venice, CA Host: Networking Virtual Private Ne.. Netgear ZyXEL
| reply to Dude111 said by Dude111:So your letting hackers,etc know your online?? A ping response from the router does not indicate if I am online or not, it just means that the router is powered up.
This helps troubleshooting, and might also prevent some kid on the local node of manually re-using my WAN IP address in the false assumption that if it's not pingeable, it must not exist, kicking us both mostly offline.
Malicious portscans are never preceded by a ping these days, it would just waste bandwidth due to the prevalence of personal firewalls. They always do a direct probe to the port of interest. That's the only information they are interested in. All that counts is if a particular port is vulnerable or not. It is only vulnerable if it is running the particular service the prober expects. The difference between closed and stealth is irrelevant. I prefer closed instead of stealth, again because it causes less problems.
Due to the prevalence of routers, direct hacking of a typical residential setup without exposed external services is nonexistent. The main threat is from within your LAN, e.g. via poorly secured wireless access or malicious software, spyware, and rootkits that are introduced via social engineering. That's where your concerns should be!
Nobody has been "hacked" via ICMP. |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 Reviews:
·Time Warner VOIP
| reply to zigzagpt said by zigzagpt:Just go to Firewall > Intrusion Detection and in there check the 3 items referring to "Intrusion Detection Feature". Finally, in "Stateful Packet Inspection" check the 5 items as well. Your router will not respond to pings anymore. My firewall is disabled in the router,if i enable it,some of my programs wont work right...
The only way i can do this is to have the firewall enabled??
Bull ticky!! |
|
 | reply to Dude111 Sorry for the late reply. Huge time differences. IMHO, yes. You must enable the router firewall. Once you say some programs won't work right just to NAT > enable it. Next into Virtual Server give access (I mean) open ports to the ones you say are giving you troubles. Just remember, in order to access the virtual server you must have javascripts enabled. Hope it'll be of help. |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 uugghh.....
Thank you  |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 Reviews:
·Time Warner VOIP
1 edit | reply to Dude111 How about if i do this.....
If i goto this page
»192.168.0.1/admin/firewall_a.asp
and check the box that says "Enable Access Control" and leave the 2 boxs UNCHECKED at the bottom that says "Respond to pings",will that work even though the firewall is disabled??
PINGS SHOULD NOT BE RESPONDED TO UNLESS THOSE BOXS ARE CHECKED!! (Regardless) |
|
 | reply to Dude111 In my router and regarding the "Access control" the "Enable Filtering Function" feature has been checked by default. I didn't mess with it. Frankly, I still don't get why you don't wanna enable the router firewall. Just remember that an hardware firewall is safer than a software one. Even though, you can have both without conflicts. The way I've described above has been working for me. |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 Reviews:
·Time Warner VOIP
1 edit | reply to Dude111 I suppose i could but i might have issues again with VOIPERIZED im not sure.....
So on yours "Enable Access control" is checked w/o you checking it?
Im wondering if checking this WITHOUT THE FIREWALL ENABLED would prevent pings from being responded to. (Which is the best way) |
|
 | reply to Dude111 As to Voiperized issue you already know that it uses UDP 4379, right? So, it's in the "Access Control" where you should have configured the above mentioned port. In the other thread I also notice you've been playing with several router settings including DMZ. If you aren't an expert I advise you not to touch it. DMZ is disabled by default for a reason. "Access control" feature is safer than DMZ. For me, SMC has been almost like a plug and play router. No big fuss! Playing around with too much settings will give troubles in return. Here in Europe SMC has a free call support line. My suggestion: get the one in USA and they'll help you better. My guess is that you must start from the beginning. Last note: if all your ports are stealthed how do they respond to pings? strange... |
|
 Dude111An Awesome DudePremium join:2003-08-04 USA kudos:10 | reply to Dude111 Because the SMC ROUTER is responding to the ping NOT MY COMPUTER (Yes i have EVERY PORT stealthed and i used to pass the GRC (OR any other test) 100% before getting this piece of crap) |
|