Re: ICMP Ping constantly ticked--risk or not?



If you have the file and print sharing exception enabled on your firewall
then the ICMP allow incoming echo request is also enabled and can not be
disabled as long as the file and print sharing exception is enabled though
you should check to make sure that if it is enabled and you need it that it
only allows access from your network only in edit - change scope.

If you are connected to the internet and use cable or DSL and use an
"internet router" then the results would reflect a test of your internet
router in how it is acting to protect your network and they often have a
configuration setting to allow ping response or not. When possible I prefer
to disable ping responses for my internet router or firewall though if it is
not or can not be I don't consider much of a security risk if any. If that
is all that was found I would not be concerned if it is not possible for you
to disable it. Your wireless network could be at risk if you are using WEP
instead of WPA to secure wireless network traffic. Even when using WPA you
should use PSK of at least 15 characters in length and keep written copies
of it somewhere secure. --- Steve


"CJ" <cmj762@xxxxxxxxxxxxxxxx> wrote in message
news:%23TJq%23MNNGHA.2604@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have Xp Home, SP2, and have tried security check with Gibson's Research
Website, which shows that I fail on the "ping" check, but am secure for
all other checks. (grc.com)

When I do to Windows firewall, I notice that ICMP tab has "allow ping"
checked, and I cannot un check this. I have a computer on a wireless
network downstairs, which is (hopefully secure) on a password enabled
network.

Is this why I cannot uncheck the IMCP ping box? Is it a risk please? I
don't recall having this problem before?

Thanks for any advice.

CJ--


---
avast! Antivirus: Outbound message clean.
Virus Database (VPS): 0607-2, 16/02/2006
Tested on: 18/02/2006 21:35:30
avast! - copyright (c) 1988-2005 ALWIL Software.
http://www.avast.com





.



Relevant Pages

  • Re: What security package for SBS?
    ... I have a secure Windows network. ... I also have a secure MacMini and on occasion a secure Ubuntu. ... With a business class firewall stripping crap off all incoming traffic and properly implemented security policies in addition to giving your users absolutely no admin rights, there is no reason to believe you can't create a secure Microsoft Network. ...
    (microsoft.public.windows.server.sbs)
  • Re: XP Network doesnt allow new computer to access
    ... I turned the firewall off. ... no other machines are visible in My Network Places. ... > You are then offered the choice to enable File and Print sharing. ... > ping 192.168.0.x ...
    (microsoft.public.windowsxp.network_web)
  • Re: XP Network doesnt allow new computer to access
    ... This machine can ping other one. ... no other machines are visible in My Network Places. ... >> The list of servers for this workgroup is not currently available." ... I've mucked around with the firewall - ...
    (microsoft.public.windowsxp.network_web)
  • Re: cant setup network
    ... can ping the network adapter and the new computer's ip address. ... Your problems all point to some firewall blocking ICMP packets. ... and I had to hunt to find where to enable file and printer sharing. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Re: Cant ping win 2000 Pro
    ... >> ping each other either by name or IP address. ... > Windows 2000 Pro ... >> ports and network cables. ... > a) Firewall restrictions. ...
    (microsoft.public.win2000.general)