In Windows Defender FIrewall, if you go to Advanced Settings,in the Rules panel there is a column "Enabled" that can be set Yes or No and another column "Action" that can be set Allow or Blocked. What I said is that my default setting now is "Enabled" set to No and "Action" set to "Allow". I'd assume that for Windows Defender to block ping requests, it should be set to Enabled/YES and Action/Blocked.
Yes exactly as we are talking about layer 3 but the point is if you are just going to leave your gateway open then the attack has already made it past the first defense.
I am telling you disable it on the router and try the test again you will see that it will pass i am not just talking out my ass. Unless you disabled the routers firewall which is not a great idea.
That is correct.
- The Rule needs to be enabled for the Firewall to check the traffic.
- The Action needs to be set to Blocked for the results of the check to block pings
I've amended my post #7 to make that clearer.
All the best,
Denis
Hi Denis, thanks for the ammendment with detailed steps, I did follow those (they make sense and coincide with what I posted before) but the ShieldsUp test still yields the same identical failed result on Ping. I even added a bloc to ipV6 too and for outbound too, to make it even safer, and still same fail results. I'm starting to believe that the culprit is the router and that ShieldsUp is testing the router, detecting a ping reply from the router, even though my PC is now stealth to pings. Could that be the case? My iPad connected wirelessly to the same router also yields a fail ping ShieldsUp test, which seems to support my hypothesis.
Finally, do these firewall changes cripple Windows in any way? Thanks
- - - Updated - - -
You are welcome!
Well, my initial thought was that ShieldsUp would be able to distinguish a ping replied from the router or from my PC, and so even if the router replies a ping that ShieldsUp would be able to report that my PC is stealth to ping requests. Seems to not be the case, ShieldsUp seems to only test the first device directly connected to the WAN (the router in my case).
As an additional note, my router lacks an internal firewall so this router will always fail a ping request test. IN another location I have another router with built in firewall and ShieldsUp is successful there.
If it really has no firewall then I think you should throw that router away.
But I do not know how well you have studied its user manual. Most router manuals are written in Martian.
Denis
Unfortunately it's an ISP supplied modem/router for a fiber optic connection, so I cannot replace it. Yes, I searched for the user manual and seems to not have an internal firewall. In addition, I explored the router's menu by logging into it, and there is no option to configure a firewall.
I ignored it the first time but you've now used that term again and I don't understand what you mean. I do not know if you mean something in particular.
It should have a firewall facing the outside world.
It will have less defence on its connections to your own devices.
Since you are paying a subscription, perhaps you could ask their helpline what firewall the router has.
In my country, our 'Consumers' Association' recently shamed major ISPs into removing serious security vulnerabilities from their routers.
Best of luck,
Denis
Quote
