How are we to deal with open ports?

[nithig]

I would like max security as I'm sure would you. But I'm not very tech savvy so look for outside solutions.
I went to Steve Gibson's site Home of Gibson Research Corporation

Then I checked my ports (goto ShieldsUP)
I'll attached an image of the result.

My question is: what is best to be done?
e.g. Do I need Port 443 open in order to make online purchases?
or Port 80 to be able to access websites?

This seems to me a rather specialised area so I invite those with the requisite know-how to contribute.

 

[RolandJS]

If you're using Windows 7 Firewall or any known-good 3rd party firewall, I would not worry about what's open Unless you let something in, there are no problems.

 

[nithig]

Hello Roland,
your quote makes me smile!
Appreciate the response. If I may trouble you a little further...
The leak test (also from grc.com) shows that the Win7 Pro Firewall is easily penetrated.
This concerns me so I'd value your comment.

 

[Callender]

Well open ports are not much to worry about. You just need to know which process is using them. Visible ports are something else. It's preferable to stealth them. I don't know much about windows firewall as I have not used it for years.

My results:

​

My Firewall:

​

Related info: Visible ports found?

RE: Port 443 see here and also folllow Tookeri's advice: Using Shields up in both IE and Chrome

 

[nithig]

Thanks Callender, I'm in the process of checking firewalls although so far Windows Firewall has been fine. I also use
StartPage by Ixquick Search Engine as my home page and have installed Adaware's Web Companion to test it - I don't goto malicious sites but with redirection it's not impossible to hit a bad site (some quite unaware as I once found Gumtree, the trading platform, to be.)
And yes, my Visible Ports report is identical to yours ... total stealth.
Appreciating this learning more about security!

 

[Callender]

And yes, my Visible Ports report is identical to yours ... total stealth.

That does not appear to be the case from your screenshot.

The results I posted earlier were from "All Service Ports" scan. Here are my results from what I think is the same scan as in your screenshot:

​

I don't see where your screenshot shows ports are stealthed!

 

[Callender]

Aslo if you read through the threads linked in Post #4 you can see ways of finding which process is using an opened port via command line.

An easier way is to use this portable program:

Open Ports Viewer​

 

[RolandJS]

I just now got back in! I see Callender did a great job of providing answers!

 

[nithig]

How strange Callender. I'll describe what happened.
1st. I ran 'All Service Ports' and the entire grid came up Green (Identical to the one you showed).

2nd. Ran the 'Common Ports' and got the result I posted above showing some open ports.

3rd. On basis of that (prior to asking here) I installed another firewall

4th. Now I don't get the green grid...mostly blue (closed) with some red (open)

5th removed firewall and started Windows firewall again and still get that same result (blue and some red)

So I don't understand why the result is so different and clearly I'm a bit out of my depth.

 

[Callender]

5th removed firewall and started Windows firewall again and still get that same result (blue and some red)

.

I think you need help from someone who knows more about Windows Firewall. If you installed another firewall it's possible that it wasn't fully removed.

 

[nithig]

Seemed to remove ok and I did a full shut-down & restart . No remnants of that firewall remain in registry.
How would I check?
How can I get Win firewall back to where it was? Is it an adaptive wall, will it 'learn'?

Purpose of edit is to include attachment which seems to indicate security is good.
So I'm a little confused.
The image is from the 'Instant UPnP Exposure Test'

 

[Callender]

Well like I said I know nothing much about windows firewall. You can reset it via command prompt:

Windows Firewall - Restore Default Settings

RE: Disable UPnP at router level. Unfortunately I'm not expert on the many makes and models of routers. You'd have to research your router manual.

My results for comparison:

​

RE: Third party firewall removal and checking for leftovers. I'd do a monitored install but it's not exactly straightforward. Other than that you can use something like Revo Uninstaller to take care of software removal.

 

[nithig]

cheers Callender, appreciate your contribution.

 

[Callender]

Anyway I wouldn't worry too much about those tests. Just as long as your firewall blocks unsolicited inbound network traffic you should be okay.

 

[nithig]

Sounds good Callender ... and thank you.
One final question regarding the Windows Firewall:
How can I configure it generally and specifically how can I get it to refuse ping requests (reputedly one of the oldest ways of probing) ?

 

[Callender]

Well like I said - I have not used Windows Firewall for years so I don't know.

 

[nithig]

Yes Callender, I understand you use Comodo but I left the question hoping someone else might respond.
btw is yr comodo free-ware or do you pay ?

 

[Callender]

Yes Callender, I understand you use Comodo but I left the question hoping someone else might respond.
btw is yr comodo free-ware or do you pay ?

I use free CIS plus Firewall. However creating firewall rules isn't straightforward.

You might want to look at: Windows 10 Firewall Control (for Windows 7)

Windows Firewall Control: Configure and Manage Windows Firewall settings

Also it's mentioned in Post #12 of the tutorial thread here:

Windows Firewall - Add or Remove an Exception

 

[nithig]

Lots to read up and understand so I'll get into it.

 

[SIW2]

I get perfect stealth score from Shields up on my 7 installation.