Firewall question...

ESET Smart Security V4 test results!
http://img41.imageshack.us/img41/3439/failmqd.png

gamepro127 said:

ESET Smart Security V4 test results!
http://img41.imageshack.us/img41/3439/failmqd.png

And why it is failed? Cause some ports are 'only' closed and should be stealth?

Creer said:

Another thing is how do you scan your ports - better solution than scanning via websites is to install net tools for example Nmap Nmap - Free Security Scanner For Network Exploration & Security Audits.
It's more reliable tool.
About closed and stealth ports - there is no really difference between them Wilders Security Forums - View Single Post - [Rant] GRC's Shields Up! and "true stealth" - firewall test or harmful FUD?

HTH,
Creer

Hey Creer! Thanks much for this. I really am starting to feel secure now. I think the online scanners don't give the whole story (or at least you have to interpret them correctly!) Anyway, I downloaded and ran the Nmap-Zenmap program and I need to read up more on what its telling me but I think this is a good report. Here is what it said:

Creer said:

And why it is failed? Cause some ports are 'only' closed and should be stealth?

The TruStealth thingy

Creer said:

And why it is failed? Cause some ports are 'only' closed and should be stealth?

Is your machine any less secure with a closed port (access not possible) than with one that is stealthed (access not possible), I suggest not.

The only possible advantage of a totally "stealthed" system is any potential hacker will not know the machine is there whilst a closed port at least confirms that there is a system at the particular address probed

But never the less your system is totally secure... They can beat their head against the wall till the cows come home, but they're still not getting in and at the end of the day, thats what its all about...

Subsonic said:

Hey Creer! Thanks much for this. I really am starting to feel secure now. I think the online scanners don't give the whole story (or at least you have to interpret them correctly!) Anyway, I downloaded and ran the Nmap-Zenmap program and I need to read up more on what its telling me but I think this is a good report. Here is what it said:

Hi Subsonic,

You are welcome.
Just remember you have to enter your current IP in Target field in Zanmap.
I've seen from your screen that probably you didn't do it.

Tews said:

Is your machine any less secure with a closed port (access not possible) than with one that is stealthed (access not possible), I suggest not.

Yes I realize that very well but most users looking only if they FW stealth all ports if not then they not satisfy... it's weired I know....

Barman58 said:

The only possible advantage of a totally "stealthed" system is any potential hacker will not know the machine is there whilst a closed port at least confirms that there is a system at the particular address probed

Not exactly...

People think that not responding to ping makes them invisible and the "hacker" will think there's no computer connected.

- If there was no computer with given address connected, they would get ICMP Destination Unreachable (ICMP Type 3) with one of the codes (such as 0 - net unreachable, 1 - host unreachable... etc).

- Whey they simply drop those packets (full stealth), they get a request time-out instead, so the router is clearly suggesting that there actually is a computer out there with such address, but it's dropping the ICMP packets...

People have to realize that there is no such thing as "invisible" on the Internet and differences between stealth and closed ports rely only on marketing approach FW vendors.

Creer said:

Hi Subsonic,

You are welcome.
Just remember you have to enter your current IP in Target field in Zanmap.
I've seen from your screen that probably you didn't do it.

I realized that after I looked at Zanmap a bit more. I've done a rescan with my IP in the target field. I get these results. I see "0 ports scanned" in the output. Does this mean that it couldn't scan them due to my firewall or does it not scan them because it can't scan on itself?

Subsonic you entered your router IP, I talked about you IP from ISP, you can check it eg here: Check and Map your Current IP address.