Disabling Ping Response or even stealth it

[mickey megabyte]

does http://192.168.1.1 not work?

does your router also have a hardware reset button somewhere - that may clear the password, but will probably also clear all other settings too....

*edit* mike's too quick for me, but it is gone 2am, bedfordshire time....

 

[SIW2]

I failed grc ping , then adjusted only windows firewall - not touching the router at all.

Passed:

 

[Mike Connor]

I failed grc ping , then adjusted only windows firewall - not touching the router at all.

Passed:

View attachment 148409

That is impossible. Adjusting something on your machine makes no difference at all to pinging a router. The ping never reaches your machine if you are behind a router firewall. The ONLY way to disable a ping to a router is to disable the ping service on the router.

Regards....Mike Connor

 

[glennc]

What router do you have?

Regards....Mike Connor

Thank all you Gentlemen for the assistance. It is indeed a Linksys WRT 120N refurbished. I reinstalled it, and it took, but the Network Magic software on the disk didn't let me in or do anything to it. It set itself up with my password, the same as the first time. All paperwork indicates 192.168.1.1, but it will only respond on 192.168.0.1. Double ratz!
Glenn

Reset to factory defaults;

WRT120N reset to factory defaults - Cisco Home Community

Regards....Mike Connor

Oh Mike Connor,
Even if this doesn't work, you are the man. Thank you so much. I will attempt it tomorrow and let you know. Fingers crossed Sir, thank you.
Glenn

 

[glennc]

does http://192.168.1.1 not work?

does your router also have a hardware reset button somewhere - that may clear the password, but will probably also clear all other settings too....

*edit* mike's too quick for me, but it is gone 2am, bedfordshire time....

Have a good night mickey megabyte. Bedfordshire, what a wonderful sounding name for a place to live. Thank you I hope you and he are correct, got a good feeling you are barking up the right tree!
Glenn

 

[glennc]

I failed grc ping , then adjusted only windows firewall - not touching the router at all.

Passed:

View attachment 148409

You and Mike are way over my head on this one. Hope it figures out correctly.
Thanks again to you both!
Glenn

 

[Mike Connor]

does http://192.168.1.1 not work?

does your router also have a hardware reset button somewhere - that may clear the password, but will probably also clear all other settings too....

*edit* mike's too quick for me, but it is gone 2am, bedfordshire time....

Have a good night mickey megabyte. Bedfordshire, what a wonderful sounding name for a place to live. Thank you I hope you and he are correct, got a good feeling you are barking up the right tree!
Glenn

He just said he was in Bedfordshire, he didn't say he was in Barking!

Regards....Mike Connor

 

[SIW2]

It would be impossible if your earlier assertion was correct.

Ergo....

I recall a while back - several members of the team here did the grc test - failed - adjusted only windows firewall inbound rules - passed.

 

[glennc]

does http://192.168.1.1 not work?

does your router also have a hardware reset button somewhere - that may clear the password, but will probably also clear all other settings too....

*edit* mike's too quick for me, but it is gone 2am, bedfordshire time....

Have a good night mickey megabyte. Bedfordshire, what a wonderful sounding name for a place to live. Thank you I hope you and he are correct, got a good feeling you are barking up the right tree!
Glenn

He just said he was in Bedfordshire, he didn't say he was in Barking!

Regards....Mike Connor

Mike Connor, you have a quick wit as well as a technological knowledge, a hard combo to beat. I stand (well actually, sit) corrected.
Take Care
Glenn

 

[Mike Connor]

It would be impossible if your earlier assertion was correct.

Ergo....

It is impossible, or are you saying it is possible, and that my assertions are incorrect?

Even if you disconnect your machine from the router, then you can still ping the router if the ping service is enabled.

If you have managed to disable the ping service to your machine, then you are not behind a router firewall, or your router is not correctly configured.

Regards....Mike Connor

 

[SIW2]

It may be that some routers will respond - so adjusting windows firewall won't help there - I don't know - I haven't got one of those routers.

Neither, clearly have the other team members.

 

[Mike Connor]

It would be impossible if your earlier assertion was correct.

Ergo....

I recall a while back - several members of the team here did the grc test - failed - adjusted only windows firewall inbound rules - passed.

If you are behind a correctly configured router firewall with all ports closed, it is impossible for the ping to reach your machine. It only pings the router.

If you want to disable the ping service altogether, you have to disable it on the router.

It makes no difference at all how you configure your machine, or what software you use. It is impossible to affect the router ping service.

Regards....Mike Connor

 

[Mike Connor]

It may be that some routers will respond - so adjusting windows firewall won't help there - I don't know - I haven't got one of those routers.

Neither, clearly have the other team members.

All routers will respond to a ping, unless the service is disabled on the router.

If you are able to affect this in any way by changing something on your machine, then you are not behind a firewalled router, or it is not correctly configured.

Regards....Mike Connor

 

[SIW2]

Not correctly configured for what exactly?

Not configured to respond to ping requests by itself, I assume. Why would it be? There is no setting for that.

This router is used by millions of people - as supplied by my isp.

 

[Mike Connor]

Not correctly configured for what exactly?

Not configured to respond to ping requests by itself, I assume. Why would it be? There is no setting for that.

This router is used by millions of people - as supplied by my isp.

If a ping gets through the firewall, ( assuming your router has a firewall), then it is not correctly configured.

To disable the ping service on a Cisco router for instance you need to change or add the ACL ( Access Control List) entry to this;

access-list 107 deny icmp any any echo log

Anybody trying to ping that device will not get anything at all, not even an administrative denial. The device is just a black hole.

You can also set up for administrative denial, and that will result in the pinging device knowing that you are there, but that the request is denied.

If you connect directly to the internet with various devices, modem type devices, or non-firewalled routers, then anybody on the net has direct access to any of your open machine ports unless you configure your machine firewall to prevent it. ( That is what you described above).

If you can affect the ping service by changing something on your machine then you are not behind a firewalled router.

If you try to ping my machine for instance, all that will happen is that you get a ping response from my router. You can not get through my router to any of my ports, regardless of how they are configured.

The IP Address of my router is
79.246.42.103

That is all you will ever see. There is no way to see the actual IP address of my machine, or to access any of my ports, unless I expressly configure the router to allow it. Or allow the use of a tunneling protocol with express permission. ( As in Team Viewer and such).

For more information;

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml

Regards....Mike Connor

 

[SIW2]

Already answered - there is nothing to add.

There might be a way of blocking requests getting thru the router - I can't find it tho.

In any case - it does not, never has, and as far as I can see - never will respond to requests itself.

This is not unusual - several team members - from all over the world - with all kinds of fancy machines and equipment did exactly the same.

Raymond ( you may know his forum ) also did it - using McAfee firewall - it is very common.

If you believe there is something wrong with all those machines/setups and millions of others , then that is up to you.

You may have extra functions on yours - doesn't mean everybody has.

It also doesn't mean all those people can't block ping requests using windows ( or other e.g. comodo ) firewall.

 

[Mike Connor]

The firewall on your machine can be set up to block all sorts of things, that is what it is for, but it only actually works if those requests reach your machine.

If you are behind a correctly configured firewalled router then such a request can never reach your machine.

Any router will respond to a ping request, and many other requests, which have been expressly enabled, or not, if they have been disabled.

I don't have any extra functions, I have a standard and fairly old router on my personal internet connection, with a built in firewall. I use several machines on it.

I have never asserted that there is anything wrong with anything at all. I merely pointed out some functions.

Quote "In any case - it does not, never has, and as far as I can see - never will respond to requests itself.".

That statement is simply incorrect. If a router could not respond to requests it would not function.

You seem to be getting rather agitated about this for some reason. I am merely pointing out some functions of firewalled and non firewalled routers.


Regards....Mike Connor

 

[Mike Connor]

Just for info, all these routers have built in firewalls;

router with firewall - Google Search

If you want to forward ports on your machine to your router so that they are visible for various things, then you need to do something like this;

Port Forwarding Guides Listed by Manufacturer and Model - PortForward.com

Regards....Mike Connor

 

[SIW2]

Yes, I have used portforwarding on this machine.

I guess responding to pings is not enabled on mine, then.

It seems to me be extremely common that a software firewall can be used to block ping requests.

So I assume that it is also extremely common for routers to not respond to ping requests .

 

[glennc]

To any that are interested, still. NO Luck. I managed to get it attempt to log in on 192.168.1.1, but could never get it to. Things rapidly fell apart after that. Eventually through my own fault and inexperience wound up completely offline. I could PING from cmd.exe the address and it would respond, but I couldn't get it to accept the default blank password or any others that have been suggested. I wound up with 2 networks and got totally confused. Used my backup restore point and hopefully lost the other network and wireless router, and reinstalled using the Linksys disk again. Now this time it left Network Magic on my system. Network Magic is sure I can't connect to the internet. I think I'm going to Revo Pro that away.
Any other thoughts, ideas, opinions?
Glenn