Ping not being ignored

[maxthegold]

I am using the latest version of WIngate, I have the Firewall option "Allow users to ping this machine from the internet" unchecked. When I test my security using Shields-Up (www.grc.com), it tells me "Your system REPLIED to our Ping (ICMP Echo) requests". Why is this?

Regards,
Mark.

[genie]

Make sure that the adapter usage is correct (internal/external).

[maxthegold]

My adapter is an ADSL modem connected via ethernet and I have it defined as external.

[genie]

Right - then it is possible that the IP address that GRC sees is not the IP of your machine but rather the IP of your ADSL modem/router which can be pinged because WG does not have control over it.

[maxthegold]

Thought it might be something like that. I discovered that I was better off not using firewall features of my modem and letting Wingate handle it instead, it did a much better job.

[adrien]

One other thing.

Check that the IP reported by GRC is correct for you.

For instance, many ISPs nowadays pipe all web requests through a transparent proxy. So, when you connect to the GRC website, they think your IP address is the address of the transparent proxy. So if that machine has pings allowed, then it will show up in the test.

Adrien

[Nev]

One other thing.

Check that the IP reported by GRC is correct for you.

For instance, many ISPs nowadays pipe all web requests through a transparent proxy. So, when you connect to the GRC website, they think your IP address is the address of the transparent proxy. So if that machine has pings allowed, then it will show up in the test.

Adrien

Hi all,

Interesting thread and I guess the 'acid test' is when utilising the 'Common ports' test at GRC, Wingate will respond:


Time: 14/09/2004 18:11:18
Reason: Port Range
Source MAC address: 00-00-5F-63-6A-28
Destination MAC address: xx1234567890xx
Source IP address: 204.1.226.228 : N/A
Destination IP address: xxx.xx.x.xxx : N/A
Protocol: ICMP
Time-to-live: 116

If and only if the echo request isn't obsrtucted elsewhere, such as ISP proxy etc.

Nev.

[maxthegold]

Nev,
Where do you find that information?

Mark.

[Nev]

Nev,
Where do you find that information?

Mark.

G'day,

The firewall has a right click option, hover over any hit and > Right click to clipboard > paste in compose window to read / save.

Cheers,
Nev.

[adrien]

I take it from the fact that it showed up in the firewall, means that the ping packet washed up against the firewall and was blocked.

Adrien