Ping not being ignored

Sep 12 04 7:25 pm

I am using the latest version of WIngate, I have the Firewall option "Allow users to ping this machine from the internet" unchecked. When I test my security using Shields-Up (www.grc.com), it tells me "Your system REPLIED to our Ping (ICMP Echo) requests". Why is this?

Regards,
Mark.

Sep 12 04 10:19 pm

Make sure that the adapter usage is correct (internal/external).

Sep 13 04 2:12 pm

My adapter is an ADSL modem connected via ethernet and I have it defined as external.

Sep 13 04 2:14 pm

Right - then it is possible that the IP address that GRC sees is not the IP of your machine but rather the IP of your ADSL modem/router which can be pinged because WG does not have control over it.

Sep 13 04 7:13 pm

Thought it might be something like that. I discovered that I was better off not using firewall features of my modem and letting Wingate handle it instead, it did a much better job.

Sep 14 04 11:59 am

One other thing.

Check that the IP reported by GRC is correct for you.

For instance, many ISPs nowadays pipe all web requests through a transparent proxy. So, when you connect to the GRC website, they think your IP address is the address of the transparent proxy. So if that machine has pings allowed, then it will show up in the test.

Adrien

Sep 14 04 9:10 pm

adrien wrote:One other thing.

Check that the IP reported by GRC is correct for you.

For instance, many ISPs nowadays pipe all web requests through a transparent proxy. So, when you connect to the GRC website, they think your IP address is the address of the transparent proxy. So if that machine has pings allowed, then it will show up in the test.

Adrien

Hi all,

Interesting thread and I guess the 'acid test' is when utilising the 'Common ports' test at GRC, Wingate will respond:

Time: 14/09/2004 18:11:18
Reason: Port Range
Source MAC address: 00-00-5F-63-6A-28
Destination MAC address: xx1234567890xx
Source IP address: 204.1.226.228 : N/A
Destination IP address: xxx.xx.x.xxx : N/A
Protocol: ICMP
Time-to-live: 116

If and only if the echo request isn't obsrtucted elsewhere, such as ISP proxy etc.

Nev.

Sep 15 04 10:48 am

Nev,
Where do you find that information?

Mark.

Sep 16 04 12:22 am

maxthegold wrote:Nev,
Where do you find that information?

Mark.

G'day,

The firewall has a right click option, hover over any hit and > Right click to clipboard > paste in compose window to read / save.

Cheers,
Nev.

Sep 16 04 2:59 pm

I take it from the fact that it showed up in the firewall, means that the ping packet washed up against the firewall and was blocked.

Adrien