Shields Up-Old XP system getting a 'Ping' from site?

Discussion in 'Hardware' started by Rocktot, Apr 14, 2014.

  1. Rocktot

    Rocktot Private First Class

    I used the Shields Up site to check my stealth on my old XP computer, and weather on XP, Mint, or Ubuntu, (computer is networked, home, to 3 other computers, mine is not the main 'server' computer)-Person who deals with router said his computer is 'fine' after Shields-Up Testing, newer higher end computer with Win8 probably).

    Nonetheless, we are on the same router (cable company) and I came back as a FAIL, on the ping only, all ports were hidden (green)

    What to do what to do? WinXP firewall is ON, Comodo firewall is ON, I tried adjusting it a bit, but no go...:confused

    I just do minor buying on that computer, but I would like to have it not 'ping' back.. ....

    Any suggestions? Doing Ubuntu or Mint did not solve the problem...
     
  2. StruldBrug

    StruldBrug Sergeant

    First, I suggest you not run both Windows and Comodo firewalls at the same time. Please refer to Chaslang sticky in Malware Removal forum "How to protect yourself from malware!" http://forums.majorgeeks.com/showthread.php?t=44525

    While I am unfamiliar with the Comodo features, I believe it to be the better of the two, based on reviews I read about it over the years. As I recall, the XP firewall was the initial firewall offering by Microsoft, but was relatively weak in performance, compared to several others, available at that time. I had it on my XP machine, became familiar with it, but chose to run something better. So, I think I can tell you how to stop pings, using the Windows firewall, but really recommend you find how to do the same thing with Comodo and use it instead.

    Ping is an echo request packet in the Internet Control Message Protocol (ICMP). If you explore your Windows firewall settings, look for ICMP and disable such traffic. Go to Start/Control Panel/Windows Firewall. Under the Advanced tab, click the ICMP Settings button, and uncheck the box "allow incoming echo request." If you click/highlight this line, note the description. Any TCP port 445 in use must be disabled. Click OK button.

    Now under the Advanced tab, click/highlight each of the Network Connection Settings listed, having a checkmark in their box, and select the Settings button, the ICMP tab, uncheck the echo box, then OK.

    Next, select the Exceptions tab. Highlight each Program and Service listed with its box checked, and click on the Edit button. Uncheck any TCP 445 box that is checked. Click OK. Windows firewall should now block the pings.
     
  3. StruldBrug

    StruldBrug Sergeant

    Let me add a caution to my previous post. Beware!. Not all ping traffic is bad and some sites require it for their applications to work. Sometimes I listen to my local Fire or Law Enforcement dispatchers to determine what all the sirens are about. I use an online radio scanner service, which requires ICMP ability to feed me the dispatch audio.

    Also, I played a game on XP with one of the other household members over the Local Area Network (LAN). It required "file sharing." File and Printer Sharing was the only item in the Windows firewall Exceptions tab, where I found TCP port 445 in use by default. Had I used the Windows firewall, I suspect I might have had difficulties with the game, if I disabled TCP port 445.

    Sorry, I have nothing to offer for Ubuntu or Mint firewalls and ICMP traffic. Hopefully, some of the Linux folk will shed some light on it.
    GL
     
  4. Rocktot

    Rocktot Private First Class

    Ok, well there is a gamer in the house, and Im thinking that is the main issue. I will try to disable through Comodo or Windows, but can only run one I think.
     
  5. mdonah

    mdonah Major Geek Extraordinaire

    I'm running Comodo Firewall and AV on my XP drive as well. When Comodo installed, it turned off Windows Firewall (see att'd). I ran a pass/fail test called LeakTest with Windows Firewall and others and they all failed. Comodo is the only one that passed and it did this by quarantining LeakTest as a PUP.
     

    Attached Files:

  6. StruldBrug

    StruldBrug Sergeant

    Look for "Stealth Port Wizard" in your version of Comodo. If you find it, look for an option that says something like "Block all incoming connections and make my ports stealth for everyone." Select it if its there.

    If this works, but you find some issues with applications not working like they used to, look for another option to make "ports stealth on a per-case basis." If so, try it instead.

    Yes, it will be best to run just one firewall. I suspect your best choice is to run Comodo and turn off the Windows firewall. Check start/control panel/windows security center for firewall on and the expanded list reports Comodo.

    "I just do minor buying on that computer" plus running XP is a red flag to me. This has a greater potential for adversity than pings will. See what Adrynalyne has ro say in a sticky, this forum, http://forums.majorgeeks.com/showthread.php?t=284995
     
  7. Rocktot

    Rocktot Private First Class

    Ok, I did that, still get the FAILED but all ports are blocked (all green) It is a system admin issue, and its uphill to deal with this nonsense. Even with a newer computer, I will still have this issue, because its at the router point I'm sure.
     
  8. StruldBrug

    StruldBrug Sergeant

    Yes, it seems likely the router is responding to the ping test and not your computer. If you can connect your computer directly to the modem, bypassing the router, you might get the result you're after. http://forums.majorgeeks.com/images/smilies/wave.gif
     
  9. Rocktot

    Rocktot Private First Class

    Actually, it does go into the comcast router.

    So, should I add my own router to act as a firewall? Would an older Lynxies model do? Whatever I do with Comodo, I still get a ping.
     
  10. StruldBrug

    StruldBrug Sergeant

    Then it seems the Comcast modem/router is the device responding to the echo request and not your computer. I would ask the person with the "fine" result to show you a test and see if it really equates to "perfect".

    I dont think adding another router will achieve a different ping result for you. You might want to talk to a Comcast tech for their take on your situation. They might use pings for service tests. You can ask them to do that for you, while you are talking to them. That would confirm it is the router.

    Since I'm not familiar with their routers, I don't think I can provide further help in this matter. If the Comcast router isn't doing Network Address Translation (NAT), you might consider a second router for that purpose. GL
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds