No stealthing - Walker's Rule
 

What do the techs here think about this?
http://homepage.ntlworld.com/robin.d...y.html#stealth

Should I set my router to block WAN or not?

Re: No stealthing - Walker's Rule
 

TBH.. In the old days of the net when IP addys were valuable things to have I would have said yes...

Now I would say no. If you have a correctly configured firewall then allowing icmp will cause no problems as long as someone does not decide to DOS you using icmp. Most decent firewalls will allow a reply and not let a DOS attack saturate the connection by dropping the packets.

Every website you visit will know your IP address anyway as they will not be able to send packets back to you without it.

Swings and roundabouts m8.... I dont bother to block icmp from my ip personaly.

Re: No stealthing - Walker's Rule
 

I agree with what RDHW has written, i do not block wan because i don't see much point in it; apply the little knowledge that i have about hacking means that the chances that it makes any difference to being the victim of am attack are very very slim. as far as i know, hackers don't make any use of icmp echo replies.

Re: No stealthing - Walker's Rule
 

Correct... Using ICMP to probe a system is a bit like pulling up to a house you are about to burgle with the car stereo on full blast :D

Not that I know anything about hacking or cracking of course :angel:

Re: No stealthing - Walker's Rule
 

I have a linksys BEFSR41 with firmware 1.45.7 connected via STB

I have no firewall software on the PC's - what's the point with a NAT router.

I enabled WAN requests and did a port probe - my ports were 'closed' instead of 'stealthed' - do these ports refer to the router or my pc?? I presume the router

Re: No stealthing - Walker's Rule
 

It would be the router - as far as the internet is concerned your pc's dont exist. The router is the only (pc) connected to the internet.

Re: No stealthing - Walker's Rule
 

Welchia pinged like hell - and your average 5kr1pt k1dd1e is not exactly subtle.

I'm NO PING, and I've never noticed any problem (other than some bandwidth test sites, where the ping time is one of the measurements) - and I reported one NTL address for repeated pings - maybe a Welchia worm that doesn't know the date!

Re: No stealthing - Walker's Rule
 

Speak of the devil.....
http://isc.sans.org/index.php
Flash Update (May 3rd 09:30 AM): We did receive some initial reports about a significant rise in ICMP traffic, which may point to a new worm with Nachi style ICMP component

I'm seeing a ping storm, less severe than Nachi/Welchia - from 80.x.x.x
I'd say there is DEFINITELY a new worm out there, and I'd rather NOT know what it does on a successful ping.

Re: No stealthing - Walker's Rule
 

Not seen any increase here yet.