How are we to deal with open ports?

[nithig]

Hello SIW2, I'm a little fascinated by the topic and on a steep learning curve re: firewalls.
On the other laptop here (also win 7) there is perfect stealth on all ports. I had that then fiddled and now don't so I'm trying to figure out what changed. First step was to reset Win Firewall to default since the old setting wasn't providing stealth.
Do you tweak your Win firewall or just leave it? I'm not sure yet but it may 'learn' as I go to various sites.

 

[SIW2]

No tweaks, just as it is .

 

[nithig]

thx! how very curious. I'll just wait and see if the firewall adapts after it's been pinged and penetrated.
I do want to close it to ping action but unsure if this can be set.

 

[SIW2]

At admin cmd prompt:to block

netsh advfirewall firewall add rule name=”ALL ICMP V4″ protocol=icmpv4:any,any dir=in action=block

To allow:

netsh advfirewall firewall add rule name=”ALL ICMP V4″ protocol=icmpv4:any,any dir=in action=allow

The long way:

control panel>windows firewall>advanced settings>inbound rules>action>new rule>custom>all programs>icmpv4>any Ip address>block connection> next > give the rule a name>finish

 

[nithig]

Thank you SIW2,
sorry to be so slow to get back to you but I've been tied up.

Before I execute the above cmd may I check with you:
does this block the ping probe or all incoming traffic?

__________________________

Your signature would appear to be very appropriate now, both the vigilance and Govt defence! I like it.