[RESOLVED] Disabling ping

[shags72]

I went to the shields up site and the only thing that failed was the ping response. HOw do I disable ping?

[cszeto]

Some NAT routers will expose that option, possibly under their "Security" options settings.

In general, responding to "ping" is not necessarily a security issue - unless there are other issues with the equipment's firmware. Playing possum with "ping" may only hide your connection from casual probing at best.

[shags72]

I saw disable ping in the router settings and it was disabled. But the site still said that it was responding. Everything else was in stealth mode. Should I be concerned with this?
I do have 2 laptops and 2 desktops on this network. I also have a Western Digital NAS hd that is cat fived into the router. Is there anything that should be done with this? Sorry to wander a bit from the subject at hand.

[cszeto]

As stated in the prior posting, not much to be concerned over, except maybe for the fact the firmware is not necessarily functioning as its status/settings are stating.

If there was any serious/obvious "vulnerabilities", then the port scans would have been able to easily picked that up and pointed that out. If you have further concerns over the "security fitness" of your NAT router, then your best bet is to take it up with the manufacturer.

Just keep in mind that the actual "weakest link" these days is the user who clicks on every link and opens every attachment.

[shags72]

OK. Well should I try and update the firmware? I appreciate the advice and I do not just click links crazily but I don't know if I can say that about my wife. Anyway Thanks again.:)

[cszeto]

That depends on whether or not there is another firmware version/update available from the manufacturer.

Even if there is, that does not necessarily mean it's better. In some cases, it may change or reduce functionality in a negative way. Ideally, you should try to have the existing firmware available too, just in case it makes sense to roll back.

[shags72]

Ok, so I guess if I am happy with the way the router is working I should probably leave it alone, right? I was just checking on that ping thing because I really don't know what it is. Thanks for the info!

[cszeto]

The following is a very good example of why "Shields UP", which is mostly a very good service, by not elaborating on their actual position which they deemed "failed" or "insecure" is actually undermining their own credibility:

http://archives.devshed.com/forums/security-104/removing-ping-icmp-from-a-network-2406350.html

Other than the test results, the rest of the GRC.com site has pretty much zero information as to how their tool came to the conclusions that it presents. It's basically telling you that you are dying and then leaving you hanging as to what you are dying from and how long it will take (i.e. we are all dying from "age" the second we were conceived)...

[shags72]

WOW! That was completely over my head. I did not follow that at all. But they sure sounded like they knew what they were talking about.