Disabling Ping Response or even stealth it

[Mike Connor]

The factory resets must normally work. Setting these things up can be something of a trial, most especially if you have never done it before and don't know how these things work. For most people, ( if they even try to do it themselves!), it is a matter of very carefully entering a series of cryptic number sequences in various places.

If you want to try, from the status quo, describe exactly what you have now, and I will try to walk you through it.

Regards....Mike Connor

 

[FliGi7]

Why is this so important to disable?

 

[glennc]

The factory resets must normally work. Setting these things up can be something of a trial, most especially if you have never done it before and don't know how these things work. For most people, ( if they even try to do it themselves!), it is a matter of very carefully entering a series of cryptic number sequences in various places.

If you want to try, from the status quo, describe exactly what you have now, and I will try to walk you through it.

Regards....Mike Connor

Hello Mike Connor,
Thanks for responding. I am currently online behind my Linksys WRT120N router that has all the internal settings set up by a proprietary Network Magic program that did allow me to set my SSID, a login password and a WPA2 128 bit encryption password. My computer will Ping from the cmd.exe the location which is my setup 192.168.1.1. But using Firefox 4 behind Commodo firewall, I time out when I try to enter that address in the bar and access it. Now not being an expert with Commodo I have it set very heavy. I am running things like no-script extensions, so I don't know what or where is wrong. I completely deleted Network Magic as it kept running a live process very frequently and it said I had no internet connection when I was online. I don't know where to look to see how many routers are attached to my machine. I am confused, beyond reasonable for my skill level. So I am running and would like to test the wireless, but the two machine in the house that use it are either gone or I loaned out the cables for it. So I don't know if I have wireless connectivity.
So if you have the kindness and the patience, I would really like to log onto my router and make sure all the settings are like they should be. Thanks if you choose to respond.
Glenn

 

[Mike Connor]

Sure, no problem.

I don't know all the implications of the software you are using, offhand, so I am going to read your post very carefully and see if I can get a handle on it.

I will get back to you as soon as I have anything useful to contribute.

Regards....Mike Connor

 

[glennc]

Sure, no problem.

I don't know all the implications of the software you are using, offhand, so I am going to read your post very carefully and see if I can get a handle on it.

I will get back to you as soon as I have anything useful to contribute.

Regards....Mike Connor

Thank you magnanimously Kind Sir! I at in your debt!
Glenn

 

[Mike Connor]

OK. I had a good look at that. I was unable to do much last night because I kept losing the Seven Forum's server.

Seems OK again now.

So. First of all a router is usually ( but not always) a piece of hardware which directs traffic to where it is supposed to go, and prevents any traffic it is set up to prevent. The router is normally connected directly to the internet via cable. The machines using the router are connected to it via cable or by wireless.

A firewall, which can be hardware or software, but in most cases nowadays is software, is also basically a traffic director, whose main purpose is to stop any unauthorised traffic, and allow any which is authorised.

I can't test the "Comodo" stuff, because I don't use it, and don't have it on my machine. Unfortunately, I also have no idea what the ""Network Magic" does. Without knowing exactly what these things do, I can't give you any sensible advice on them.

Normally, if your machine is attached to the router, then you can simply enter the address of the router, and log into it in order to set it up. If you are unable to do this, then most likely the software is preventing you from accessing the router.

I can't think of any way to overcome that while still using that software. Also, it may well be that some other address has been set up in the router, and unless you know that address, you can't access it. Normally, re-setting the router to factory defaults should allow you to access it, based on the default settings. If this does not work, then I can't think of anything else for you to try.

Regards....Mike Connor

 

[AmbrosialPariah]

Diable Ping via IPSec

Every Windows machine has IPSec it just depends on your admin status [I believe if at work on domain you may need to be domain admin to affect this, but if you own the comp and have no domain you should be good to go].
I will post the link to the page as they have screenshots and explain it in detail.. Keep in mind that ICMP is used by certain apps to verify you have an internet connection and other stuff so you may want to follow the directions and set the rules accordingly so you enable ping for your routers LAN address [ado ipconfig in command and copy the gateway address this will be your router], and disable it for anything coming in on WAN. Keep in mind you may want to check as I know I can use certain filtering setups in DD-WRT [a modified firmware for Linksys Buffalo, Hawking and other routers] Google it it's out there and popular once installed you will be able to fully customize your router with firewall, and you could do this there [and then if you re-install windows or something you don't have to remember to reset this]. Block Ping Traffic with IPSec

 

[AmbrosialPariah]

you'll probably have to do it through your router settings, as it is the router being pinged, not your pc.

(i assume you have a router, and not a usb type modem?)

your settings will no doubt be different, but here's mine, for example:

View attachment 148309

------------------------------------------------

PS - anyone know what 'strict udp session control' is, and is it a good idea to enable it?

Also, dunno if this has been answered Stricp UDP control usually is a method by which the network device [router] is set to terminated finished UDP sessions once the session is complete [MAY AFFECT SOME OLDER PROGRAMS WHOSE CODING MAY NOT ESTABLISH WHEN THIS OCCURS CORRECTLY AND IF ISSUES ARISE TRY DISABLING [but should not really be an issue]. This helps in enabling more UDP sessions [helpful for P2P if that is your thing btw], some gaming, and streaming video and closing open connections to your computer in any form lessens the ability crackers could find weaknesses]. For best control see IPSec and Windows Firewall rues [advanced]

 

[brady]

ping response = icmp
disable icmp response in your fw and or router

 

[AmbrosialPariah]

Best Network protection I have found...

For everyone the BEST network protection I have found for Windows 7 is PeerBlock [Google] used to be called Peer Guardian [IT IS NOT ONLY FOR P2P]!! What this is is a program that analyzes all IP connections [UDP as well] and based on IP Rules [deny this address allow this one MANY available online and through the setup wizard to block spiders, bots, companies, ISPs, known hackers even pop-up ad addresses EDU ranges GOV ranges, ETC. The reason I love this is it is not a per program basis I dont have to tell it to allow apps or ports what it is is you find lists [or create your own of IPs you either would want to block all access from your machine [and to or either or per how you set it]. So you could inessence block all IPs available and then allow only specific ones or block sets of IPs known to cause problems [bot nets, hackers, ISP scanners, etc. etc. and this program will scan all IP address as they create sessions in either directions and handle the IP based on those lists. This means it is faster than anyother type of program based firewall, you dont have to spend nearly as much time setting it all up, and it runs MUCH faster than any app based firewall ever will]. Oh, and when an IP is blocked your machine appears offline to the IP address [computer] in question so this is essentially a "stealth" method as you appaer to be totally offline to them [it is not like ping where they still get your IP usually and just no answer to the ping itself [round trip time] it just states Host is unreachable.
PeerBlock

 

[AmbrosialPariah]

ping response = icmp
disable icmp response in your fw and or router

Well yes and no as there are programs that still like to have access to ICMP [I know not many but they are out there]. Trying to explain how to filter ICMP so as to filter the ping, but enable compatibility to other apps if they are used as well of course if you kill ICMP there is nothing to hear the request, nor running to answer it

 

[glennc]

Howdy Mike Conner,
I was very rattled last night and it probably wouldn't have sunk in to deep. I have a previous DLink and this Linksys, and both behaved as you described.
The commodo, I think I will shut it down and try again. Hopefully the Network Magic Software that came on the Cisco Installation Disk did not screw up the passwords. I am leaning in the software problem. So I will go at it, soon. At least I can get it runnable again should I fail. Thanks for the assistance and moral support!
Glenn

OK. I had a good look at that. I was unable to do much last night because I kept losing the Seven Forum's server.

Seems OK again now.

So. First of all a router is usually ( but not always) a piece of hardware which directs traffic to where it is supposed to go, and prevents any traffic it is set up to prevent. The router is normally connected directly to the internet via cable. The machines using the router are connected to it via cable or by wireless.

A firewall, which can be hardware or software, but in most cases nowadays is software, is also basically a traffic director, whose main purpose is to stop any unauthorised traffic, and allow any which is authorised.

I can't test the "Comodo" stuff, because I don't use it, and don't have it on my machine. Unfortunately, I also have no idea what the ""Network Magic" does. Without knowing exactly what these things do, I can't give you any sensible advice on them.

Normally, if your machine is attached to the router, then you can simply enter the address of the router, and log into it in order to set it up. If you are unable to do this, then most likely the software is preventing you from accessing the router.

I can't think of any way to overcome that while still using that software. Also, it may well be that some other address has been set up in the router, and unless you know that address, you can't access it. Normally, re-setting the router to factory defaults should allow you to access it, based on the default settings. If this does not work, then I can't think of anything else for you to try.

Regards....Mike Connor

 

[Mike Connor]

My Pleasure. Sorry I was not able to give you more precise advice.

Regards....Mike Connor

 

[glennc]

My Pleasure. Sorry I was not able to give you more precise advice.

Regards....Mike Connor

Hello Mike Connors,
I think I am really messed up. Okay quick update, found that in Network it shows your router. Knew it showed somewhere but wasn't sure. Okay to the point, last night I showed two routers. One a router looking icon that said Linksys Wrt120N and a second one that had a different icon with an antenna. This occurred after reinstalling the router, my firewall showed several networks. I at that time could get to 192.168.1.1. I removed all the networks except my original named network.
I just looked at Network and the first icon is the only one visible. On clicking the icon it pops up the browser to 192.168.0.1. In its details it states that the address is 192.168.0.1. This is wrong as I recall that was the address of my old DLink router. I believe the second icon which is gone now had the address of 192.168.1.1. I told you I am severely messed up.
Can you point me in a general way toward how success. I now can ping the wrong address "0.1" and the browser will pop up a logon screen at the wrong address (note it says its a WRT120N") but the default and the password that the Network Magic installation program set as a text file on my desktop, do not work.
Manically Yours
Glenn

 

[glennc]

Every Windows machine has IPSec it just depends on your admin status [I believe if at work on domain you may need to be domain admin to affect this, but if you own the comp and have no domain you should be good to go].
I will post the link to the page as they have screenshots and explain it in detail.. Keep in mind that ICMP is used by certain apps to verify you have an internet connection and other stuff so you may want to follow the directions and set the rules accordingly so you enable ping for your routers LAN address [ado ipconfig in command and copy the gateway address this will be your router], and disable it for anything coming in on WAN. Keep in mind you may want to check as I know I can use certain filtering setups in DD-WRT [a modified firmware for Linksys Buffalo, Hawking and other routers] Google it it's out there and popular once installed you will be able to fully customize your router with firewall, and you could do this there [and then if you re-install windows or something you don't have to remember to reset this]. Block Ping Traffic with IPSec

Hello AmbrosialPariah,
Thanks for responding with this neat information. Unfortunately due to my inexperience as you can see in a previous response to Mike Connor that I am unable to connect to my router setup page. I believe somehow it is now setup to the wrong router setup page address. It by all accounts and previous experience is supposed to use 192.168.1.1. The only router showing in "Network" is correctly named and described but shows 192.168.0.1 as the correct setup page. My browser times out trying to reach the 1.1 although last night it did connect successfully. I am totally out of my league here. Any help to reconnect to my wireless router setup page is my priority as of now.
Thanks again.
Glenn

 

[brady]

when you enter: Ipconfig /all (use the address of your default gateway for the config login page)

 

[Mike Connor]

Hello Mike Connors,
I think I am really messed up. Okay quick update, found that in Network it shows your router.

Can you point me in a general way toward how success. I now can ping the wrong address "0.1" and the browser will pop up a logon screen at the wrong address (note it says its a WRT120N") but the default and the password that the Network Magic installation program set as a text file on my desktop, do not work.
Manically Yours
Glenn

The only way to get into the router if you don't know the address it is set to, is to reset it to factory defaults, as previously described.

There is no other way.

If you are using that router, then the correct address is stored on your machine. You can get that address using this;

http://www.microsoft.com/resources/.../xp/all/proddocs/en-us/ipconfig.mspx?mfr=true

Regards....Mike Connor

 

[glennc]

when you enter: Ipconfig /all (use the address of your default gateway for the config login page)

Hello brady,
Ipconfig shows the IIRC wrong address 192.168.0.1. This rabbit hole is really deep. That most definately is the address of my old DLink router.
Thank you!!
glennc

 

[glennc]

Hello Mike Connors,
I think I am really messed up. Okay quick update, found that in Network it shows your router.

Can you point me in a general way toward how success. I now can ping the wrong address "0.1" and the browser will pop up a logon screen at the wrong address (note it says its a WRT120N") but the default and the password that the Network Magic installation program set as a text file on my desktop, do not work.
Manically Yours
Glenn

The only way to get into the router if you don't know the address it is set to, is to reset it to factory defaults, as previously described.

There is no other way.

If you are using that router, then the correct address is stored on your machine. You can get that address using this;

Microsoft Corporation

Regards....Mike Connor

May I call you Mike? Mike, ipconfig /all shows the 192.168.0.1. If you are saying that this address is retrieved from the actual router at the time of the command then I don't know what. I am going to have to try a reset again.
If everyone who is monitoring this post could cross their respective fingers, I may be back with good new.
Thank all for your contributions and advice!
Glenn

 

[Mike Connor]

You need to open a command prompt, ( "Dos-Box"), as administrator, and type in "ipconfig",

this will give you a window like this;



the address you want is the "Default Gateway" address.

This will of course only be the correct address if you are using that router.

If you are using some other router, you will get a different address.

Regards....Mike Connor