Ping reply failed/Security concern

Page 1 of 6 123 ... LastLast

  1. Posts : 355
    Windows 10x64 Pro
       #1

    Ping reply failed/Security concern


    Hi, I regularly run the ShieldsUP! test on all ports. I just found that it failed due to
    "Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation."
    I checked my firewall settings for Ping ICMP Echo requests and they are not enabled. Are my settings fine? Could it be that it's non related to my PC but to the router that my PC is connected to? I'm attaching the test result and screenshot of the firewall settings
    Ping reply failed/Security concern-2023-07-22_5-13-49.jpgPing reply failed/Security concern-2023-07-22_5-15-00.jpg
      My Computer


  2. Posts : 1,211
    Windows 10
       #2

    Yes it will be on your router and you need to disable it to pass.
      My Computer


  3. Posts : 355
    Windows 10x64 Pro
    Thread Starter
       #3

    Malneb said:
    Yes it will be on your router and you need to disable it to pass.
    Even if the router is not stealth for ping requests, if my PC would be properly configured as stealth then the router shouldn't matter too. So I'm wondering how can I configure the Windows 10 firewall to hide it from Ping ICMP requests. I checked the configuration (attached screenshot in my first post) and it seems to be properly set, so I'm lost
      My Computer


  4. Posts : 1,211
    Windows 10
       #4

    Its the router, they are not testing your local machine they are sending icmp packets to your router and seeing if it responds back. Yes you are lost because you are confusing the two.
      My Computer


  5. Posts : 355
    Windows 10x64 Pro
    Thread Starter
       #5

    I don't think I'm confused. If the router allows the ping to pass to the PC, then the PC can be tested by an external ping, and if the PC is not stealth to this ping then it fails the security.
      My Computer


  6. Posts : 23,281
    Win 10 Home ♦♦♦19045.4355 (x64) [22H2]
       #6

    antares said:
    Even if the router is not stealth for ping requests, if my PC would be properly configured as stealth then the router shouldn't matter too. So I'm wondering how can I configure the Windows 10 firewall to hide it from Ping ICMP requests. I checked the configuration (attached screenshot in my first post) and it seems to be properly set, so I'm lost


    This may help...

    I don't use a router, at all. I have ping requests blocked in Bitdefender's firewall....

    Ping reply failed/Security concern-image1.jpg
      My Computer


  7. Posts : 16,950
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       #7

    Windows Firewall - Disable response to pings


    This is how to set up Windows Firewall to disable responding to pings from outside your own private network:
    Control panel,
    [View by - Large icons / Small icons,]
    Windows defender firewall,
    Advanced settings,
    [Grant Admin permission,]
    Inbound rules,
    Filter by profile - Public,
    File and Printer Sharing (Echo Request - ICMPv4-In),
    Check the Profile column to check that it's just a Public profile entry [if it is a combined Public-Private entry then skip to the variant procedure below ***],
    Properties,
    General tab,
    Set the Enabled checkbox if it is not already set [The Enabled property shows that the rule is enabled not that pings are enabled],
    Action - Block the connection,
    OK.
    Ping reply failed/Security concern-firewall-inbound-rules-public-profile-block-ping-requests-.png


    *** If the Profile column shows that an entry is for both Public & Private profiles then you can resolve this by:
    - Whilst the relevant rule is selected, right-click Copy & Paste it or do the same using Ctrl-C, Ctrl-V.
    - To make the copied entry appear, click on the Refresh control on the right-hand side of the window.
    - - On one copy of the entry,
    - - - right-click & select Properties,
    - - - then go to the Advanced tab to de-select the Public checkbox, i.e. make this entry apply only to the Private profile,
    - - - then go to the General tab to set the Enabled checkbox if it is not already set,
    - - - then click on OK because you are not going to alter the Private profile entry in any other way.
    Ping reply failed/Security concern-advanced-tab-change-applicable-profiles.png
    - - Then, on the other copy of the entry [the one you will alter to disable responses to Public pings]
    - - - right-click & select Properties,
    - - - then go to the Advanced tab to de-select the Private checkbox, i.e. make this entry apply only to the Public profile, which is the one you want to change.
    - - - Then go to the General tab,
    - - - Set the Enabled checkbox if it is not already set,
    - - - Action - Block the connection,
    - - - OK.
    I've added these extra comments because I found a combined entry on one of the three computers I've just checked. I was quite surprised by what I found - one computer already had the settings I've just given you instructions for, one had the combined Public-Private entry that needed untangling whilst the third computer explicitly allowed pinging on Public networks.


    My router blocks Public profile ping requests anyway so, in my case, the Windows Firewall setting comes into play only when I'm connected directly to an internet connection [rather than through my own network].


    All the best,
    Denis
    Last edited by Try3; 22 Jul 2023 at 10:01.
      My Computer


  8. Posts : 355
    Windows 10x64 Pro
    Thread Starter
       #8

    Ghot said:
    This may help...

    I don't use a router, at all. I have ping requests blocked in Bitdefender's firewall....

    Ping reply failed/Security concern-image1.jpg
    That's what I said before, there's no need for a router to stealth pings, if the Windows Firewall is correctly configured the PC connected to the internet without router should be invisible to ping requests. In your case Bitdefender sets the configuration for you.

    - - - Updated - - -

    Try3 said:
    This article says that the Windows Defender Firewall blocks ping requests by default but I don't think that is correct [perhaps it was the case in earlier Versions???].
    How to Allow Ping in Windows Firewall - ADPro
    Nevertheless, its instructions for allowing ping requests also guides you in setting your computer's Firewall to block them.
    Control panel,
    [View by - Large icons / Small icons,]
    Windows defender firewall,
    Advanced settings,
    [Grant Admin permission,]
    Inbound rules,
    Filter by profile - Public,
    File and Printer Sharing (Echo Request - ICMPv4-In),
    General tab,
    Action - Block the connection,
    OK.
    Ping reply failed/Security concern-firewall-inbound-rules-public-profile-block-ping-requests-.png
    That Enabled column shows that the rule is enabled not that pings are enabled.



    My router blocks Public profile ping requests anyway so, in my case, the computer setting comes into play only when I'm connected directly to an internet connection [rather than through my own network].


    All the best,
    Denis
    My Windows 10 Defender Firewall has set ping requests allowed but disabled by default for both the File and Printer Sharing and Core Networking Diagnostics ICMP Echo Requests. Should I disable or enable? Block or allow?
      My Computer


  9. Posts : 16,950
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       #9

    antares said:
    My Windows 10 Defender Firewall has set ping requests allowed but disabled by default
    Exactly what is disabled?
    The rule? That means the check is not done.


    antares said:
    Block or allow?
    You said you wanted to block them.


    Denis
      My Computer


  10. Posts : 23,281
    Win 10 Home ♦♦♦19045.4355 (x64) [22H2]
       #10

    @antares


    You'll need someone else to help with that. I don't use Windows firewall.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:07.
Find Us




Windows 10 Forums