Firewall and external port scanning

[Sandtoyz]

I recently did a 'security check' where external ports were scanned for possible connections.
The results showed that although the ports were closed, the router replied to the probing host that the port(s) were closed, rather than just dropping the port probe with no reply.
This still gives away that there is a connection at that address, and could lead to a more dedicated port probing.

Is there a way to configure the router / firewall to silently drop external probes?
This was on the MR-108N with a 3G connection only.

[admin]

Hi

Sorry there is no way of doing this.

I've passed this on to Engineers for consideration.

Cheers

[Sandtoyz]

If it is any help, this is a summary of the port probes test.


Solicited TCP Packets: RECEIVED (FAILED) — As detailed in the port report below, one or more of your system's ports actively responded to our deliberate attempts to establish a connection. It is generally possible to increase your system's security by hiding it from the probes of potentially hostile hackers. Please see the details presented by the specific port links below, as well as the various resources on this site, and in our extremely helpful and active user community.



Unsolicited Packets: PASSED — No Internet packets of any sort were received from your system as a side-effect of our attempts to elicit some response from any of the ports listed above. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system remained wisely silent. (Except for the fact that not all of its ports are completely stealthed as shown below.)



Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation.

[Sandtoyz]

I would have expected the 'ICMP Echo' drop silently (or similar), an option in the firewall page.

I have all 4 options enabled on this page, but it still replies to ping requests.

Oh, and Thanks for passing on this request/info.