Vista - Disabling ICMP echo requests from Windows Firewall

Is it possible to configure Windows Firewall, thus disabling it to have ICMP
echo requests (Ping) following the online scan by ShieldsUP (Gibson Research
Corporation)? Unfortunately, my existing 1-port ADSL ethernet modem has no
option to disable Ping. Is it required to edit any Inbound Rules and/or
Outbound Rules on "Windows Firewall with Advanced Security"? I look forward
to having any expert advice on how to proceed with.

See
http://www.petri.co.il/block_ping_tr...with_ipsec.htm

--

Mike Brannigan
"AChung" <AChung@discussions.microsoft.com> wrote in message
news:24E29E57-FB1B-4E12-8565-573E536AC0D7@microsoft.com...
> Is it possible to configure Windows Firewall, thus disabling it to have
> ICMP
> echo requests (Ping) following the online scan by ShieldsUP (Gibson
> Research
> Corporation)? Unfortunately, my existing 1-port ADSL ethernet modem has
> no
> option to disable Ping. Is it required to edit any Inbound Rules and/or
> Outbound Rules on "Windows Firewall with Advanced Security"? I look
> forward
> to having any expert advice on how to proceed with.

"AChung" <AChung@discussions.microsoft.com> wrote in message
news:24E29E57-FB1B-4E12-8565-573E536AC0D7@microsoft.com...
> Is it possible to configure Windows Firewall, thus disabling it to have
> ICMP
> echo requests (Ping) following the online scan by ShieldsUP (Gibson
> Research
> Corporation)? Unfortunately, my existing 1-port ADSL ethernet modem has
> no
> option to disable Ping. Is it required to edit any Inbound Rules and/or
> Outbound Rules on "Windows Firewall with Advanced Security"? I look
> forward
> to having any expert advice on how to proceed with.

<coppied right from Vista O/S *Help*>
What happened to the ICMP and logging settings in Windows Firewall?
You must be logged on as an administrator to perform these steps.

To find ICMP and logging settings, open Windows Firewall with Advanced
Security.

1.. Click to open Administrative Tools.* If you are prompted for an
administrator password or confirmation, type the password or provide
confirmation.

2.. Double-click Windows Firewall with Advanced Security.

To change logging settings:

1.. Under Public Profile, click Windows Firewall Properties.

2.. Click the tab for the profile that you want to change.

3.. Under Logging, click Customize.

4.. In the dialog box that appears, change the settings you want to
change, and then click OK.

You can specify ICMP settings by creating inbound or outbound rules using
the ICMPv4 or ICMPv6 protocol.

<end copy>

Dear Mike

Thank you for giving me the following link, which is applicable to Windows
2000/XP/2003 computers as indicated. I am not sure if same configuration can
be applied to Windows Vista Home Basic, where IPv4 and IPv6 are being used.
Please advise further, if possible, because Windows Vista Home Basic is quite
new to me.

Regards.


"Mike Brannigan" wrote:

> See
> http://www.petri.co.il/block_ping_tr...with_ipsec.htm
>
> --
>
> Mike Brannigan
> "AChung" <AChung@discussions.microsoft.com> wrote in message
> news:24E29E57-FB1B-4E12-8565-573E536AC0D7@microsoft.com...
> > Is it possible to configure Windows Firewall, thus disabling it to have
> > ICMP
> > echo requests (Ping) following the online scan by ShieldsUP (Gibson
> > Research
> > Corporation)? Unfortunately, my existing 1-port ADSL ethernet modem has
> > no
> > option to disable Ping. Is it required to edit any Inbound Rules and/or
> > Outbound Rules on "Windows Firewall with Advanced Security"? I look
> > forward
> > to having any expert advice on how to proceed with.
>

Dear Mr Arnold

Thank you for your guidance.

It seems to me that my home PC is using IPv4 mainly for Internet. Can you
please show me how to edit a filter rule, whether Inbound or Outbound, to
block ICMP echo requests (PING) as desirable?

Is it required to configure my home home PC because I have installed a
third-party software firewall to replace the built-in Windows Firewall?

Please let me have your further advice.

Regards.


"Mr. Arnold" wrote:

>
> "AChung" <AChung@discussions.microsoft.com> wrote in message
> news:24E29E57-FB1B-4E12-8565-573E536AC0D7@microsoft.com...
> > Is it possible to configure Windows Firewall, thus disabling it to have
> > ICMP
> > echo requests (Ping) following the online scan by ShieldsUP (Gibson
> > Research
> > Corporation)? Unfortunately, my existing 1-port ADSL ethernet modem has
> > no
> > option to disable Ping. Is it required to edit any Inbound Rules and/or
> > Outbound Rules on "Windows Firewall with Advanced Security"? I look
> > forward
> > to having any expert advice on how to proceed with.
>
> <coppied right from Vista O/S *Help*>
> What happened to the ICMP and logging settings in Windows Firewall?
> You must be logged on as an administrator to perform these steps.
>
> To find ICMP and logging settings, open Windows Firewall with Advanced
> Security.
>
> 1.. Click to open Administrative Tools.* If you are prompted for an
> administrator password or confirmation, type the password or provide
> confirmation.
>
> 2.. Double-click Windows Firewall with Advanced Security.
>
> To change logging settings:
>
> 1.. Under Public Profile, click Windows Firewall Properties.
>
> 2.. Click the tab for the profile that you want to change.
>
> 3.. Under Logging, click Customize.
>
> 4.. In the dialog box that appears, change the settings you want to
> change, and then click OK.
>
> You can specify ICMP settings by creating inbound or outbound rules using
> the ICMPv4 or ICMPv6 protocol.
>
> <end copy>
>

"AChung" <AChung@discussions.microsoft.com> wrote in message
news:89B4DBFF-5284-498A-ABEA-E2C16BBF0A63@microsoft.com...
> Dear Mr Arnold
>
> Thank you for your guidance.
>
> It seems to me that my home PC is using IPv4 mainly for Internet. Can you
> please show me how to edit a filter rule, whether Inbound or Outbound, to
> block ICMP echo requests (PING) as desirable?
>
> Is it required to configure my home home PC because I have installed a
> third-party software firewall to replace the built-in Windows Firewall?
>
> Please let me have your further advice.
>

Just follow the link that was given to you about IPsec. The information in
those screens will show you how to filter the ping traffic in any FW, if the
FW has the ability to set the rules.

"AChung" <AChung@discussions.microsoft.com> wrote in message
news:06874032-DC53-4E23-8549-24C7082214E6@microsoft.com...
> Dear Mike
>
> Thank you for giving me the following link, which is applicable to Windows
> 2000/XP/2003 computers as indicated. I am not sure if same configuration
> can
> be applied to Windows Vista Home Basic, where IPv4 and IPv6 are being
> used.
> Please advise further, if possible, because Windows Vista Home Basic is
> quite
> new to me.
>

Vista is just another NT based O/S like Win 2k, XP and 2k3. IPsec is part of
the Vista O/S(s) at least on Vista Home Premium and Ultimate that I have
used. And the rules for IPsec can be applied to all four NT based platforms,
even though you don't see Vista being mentioned.

I use IPsec to supplement Vista's FW, XP's FW and any 3rd party FW solution
I have used on the NT based O/S, for a machine that will have a direct
connection to the modem and therefore a direct connection to the Internet.

I implement/enable the client side AnalogX IPsec policy rules and disable
the server side rules, as I don't have anything on the server side being
exposed to the Internet.

http://www.analogx.com/CONTENTS/articles/ipsec.htm
http://support.microsoft.com/kb/813878

"AChung" <AChung@discussions.microsoft.com> wrote:
<...>
> disabling it to have ICMP echo requests (Ping) following the
> online scan by ShieldsUP (Gibson Research Corporation)?
> Unfortunately, my existing 1-port ADSL ethernet modem has
> no option to disable Ping.

Do keep in mind that your modem may influence the ShieldsUp! ping test.
Blocking ICMP echo requests in Windows Firewall won't necessarily keep your
modem quiet.

Also keep in mind that generally, a 'block all incoming pings' option should
be selected with care. It might cause trouble for your DSL connection.

Charlie42

Hi, Charlie

Thank you for your good advice.

Regards.


"Charlie42" wrote:

> "AChung" <AChung@discussions.microsoft.com> wrote:
> <...>
> > disabling it to have ICMP echo requests (Ping) following the
> > online scan by ShieldsUP (Gibson Research Corporation)?
> > Unfortunately, my existing 1-port ADSL ethernet modem has
> > no option to disable Ping.
>
> Do keep in mind that your modem may influence the ShieldsUp! ping test.
> Blocking ICMP echo requests in Windows Firewall won't necessarily keep your
> modem quiet.
>
> Also keep in mind that generally, a 'block all incoming pings' option should
> be selected with care. It might cause trouble for your DSL connection.
>
> Charlie42
>
>

Dear Mr Arnold

Thank you for your guidance.

Regards.


"Mr. Arnold" wrote:

>
> "AChung" <AChung@discussions.microsoft.com> wrote in message
> news:89B4DBFF-5284-498A-ABEA-E2C16BBF0A63@microsoft.com...
> > Dear Mr Arnold
> >
> > Thank you for your guidance.
> >
> > It seems to me that my home PC is using IPv4 mainly for Internet. Can you
> > please show me how to edit a filter rule, whether Inbound or Outbound, to
> > block ICMP echo requests (PING) as desirable?
> >
> > Is it required to configure my home home PC because I have installed a
> > third-party software firewall to replace the built-in Windows Firewall?
> >
> > Please let me have your further advice.
> >
>
> Just follow the link that was given to you about IPsec. The information in
> those screens will show you how to filter the ping traffic in any FW, if the
> FW has the ability to set the rules.
>
>