henrypp / simplewall

Simple tool to configure Windows Filtering Platform (WFP) which can configure network activity on your computer.
GNU General Public License v3.0
6.08k stars 481 forks source link

simplewall and GRC | ShieldsUP #33

Closed hesss5 closed 7 years ago

hesss5 commented 7 years ago

with just simplewall it can pass two test of grc.com Solicited TCP Packets Unsolicited Packets great job however third one not Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation.

https://www.grc.com/x/ne.dll?bh0bkyd2 can you add predifined rule for ICMP Echo request too?

thanks

henrypp commented 7 years ago

No. GRC pinging/scanning not your computer (where simplewall installed), GRC pinging/scanning your router.

for test simplewall/your computer use nmap from different computer at your LAN.

example:

# TCP SYN scan
./nmap -sS -p 1-2048 LAN_IP_ADDR
# UDP ports scan
./nmap -sU -p 1-2048 LAN_IP_ADDR