SMC ROUTER QUESTION

SMC ROUTER QUESTION
Links: home · search · speed test · login · more ·

Links: Reply New Topic
Forums » Hardware By Brand » SMC Networks » SMC ROUTER QUESTION

Dude111 @ 16th Oct 09:58PM:
SMC ROUTER QUESTION

I hadnt been to the GRC site in awhile,i just did a test now and I AM QUITE ANGRY!!

This thing responds to PING REQUESTS!!!

I used to PASS that security test on GRC before i had this piece of garbage router!!

Anyone know how to stop the SMC ROUTER from responding to pings?? (It must be the router as my local firewall is stealthed on port 113 and will ignore the request (The firewall in the router is disabled))

Another reason for me to hate this piece of trash they stuck me with!!
reply

ironwalker @ 16th Oct 10:03PM:
Re: SMC ROUTER QUESTION

Go into the routers security configuration and turn it off.
reply

lorennerol @ 16th Oct 10:25PM:
Re: SMC ROUTER QUESTION

Responding to ICMP packets is not a huge issue. Not scoring 100% a Steve Gibson test is even less of a concern.

As mentioned, login to the router (cusadmin/highspeed), turn off ICMP, and enjoy your evening.

:)
reply

Dude111 @ 16th Oct 10:40PM:
Re: SMC ROUTER QUESTION

There is nowhere to disable ICMP!!

This thing is a piece of garbage :(
reply

Smith6612 @ 16th Oct 10:42PM:
Re: SMC ROUTER QUESTION

There's nothing wrong with ICMP. All of the modems my one of my ISPs hands out have the firewall disabled, and pretty much every one of my ISP's modems all reply to ICMP. I've had my modem replying to it for over a year now and recently set up a line monitor. I'm not getting DDoS'd/hacked at all, and I do host servers frequently for games and visit many sites.
--
It's all fun and games in a Team Fortress 2 battle until your sentry gun is sapped by the Spycrab!
reply

Dude111 @ 16th Oct 10:44PM:
Re: SMC ROUTER QUESTION

Yes but ya still like having the added security of not responding to any pings!!
reply

Smith6612 @ 16th Oct 10:45PM:
Re: SMC ROUTER QUESTION

Well in that case, if you can't find any setting in your SMC to shut off ICMP/Anon Internet Requests, if you have a router already in place why not bridge the modem and use your router's firewall?

By the way if your ISP is Time Warner and you're using one of their SMCs, I did read a post saying that the firmware was just hiding options using either CSS or JavaScript. Might want to look into that.
--
It's all fun and games in a Team Fortress 2 battle until your sentry gun is sapped by the Spycrab!
reply

Dude111 @ 16th Oct 10:47PM:
Re: SMC ROUTER QUESTION

No i just have this SMC wireless piece of garbage......

It has DNS hijacking,etc...... (Took me awhile to get the DNS issues fixed (ITS JUST A PIECE OF CRAP))
reply

SYNACK @ 17th Oct 02:21AM:
Re: SMC ROUTER QUESTION

said by Dude111 :

Anyone know how to stop the SMC ROUTER from responding to pings?? (It must be the router as my local firewall is stealthed on port 113 and will ignore the request (The firewall in the router is disabled))

OK, cool down. Blocking ping requests does not add to your security. What makes you think it does?

Let's start from the beginning:

What is the exact router model number?
What have you tried?

I don't understand how port 113 is connected to any ping response and how your local firewall is involved in this. Do you forward any ports? Can you explain?

Personally, I explicitly enable ping response on the router. ;)
reply

Dude111 @ 17th Oct 02:21PM:
Re: SMC ROUTER QUESTION

You enable ping requests??

So your letting hackers,etc know your online??

Not a good thing my friend,you should try to be AS INVISIBLE AS YOU CAN!!
reply

zigzagpt @ 17th Oct 05:04PM:
Re: SMC ROUTER QUESTION

Just go to Firewall > Intrusion Detection and in there check the 3 items referring to "Intrusion Detection Feature". Finally, in "Stateful Packet Inspection" check the 5 items as well. Your router will not respond to pings anymore.
reply

SYNACK @ 18th Oct 01:36AM:
Re: SMC ROUTER QUESTION

said by Dude111 :

So your letting hackers,etc know your online??

A ping response from the router does not indicate if I am online or not, it just means that the router is powered up.

This helps troubleshooting, and might also prevent some kid on the local node of manually re-using my WAN IP address in the false assumption that if it's not pingeable, it must not exist, kicking us both mostly offline.

Malicious portscans are never preceded by a ping these days, it would just waste bandwidth due to the prevalence of personal firewalls. They always do a direct probe to the port of interest. That's the only information they are interested in. All that counts is if a particular port is vulnerable or not. It is only vulnerable if it is running the particular service the prober expects. The difference between closed and stealth is irrelevant. I prefer closed instead of stealth, again because it causes less problems.

Due to the prevalence of routers, direct hacking of a typical residential setup without exposed external services is nonexistent. The main threat is from within your LAN, e.g. via poorly secured wireless access or malicious software, spyware, and rootkits that are introduced via social engineering. That's where your concerns should be!

Nobody has been "hacked" via ICMP.
reply

Dude111 @ 18th Oct 02:21AM:
Re: SMC ROUTER QUESTION

said by zigzagpt :

Just go to Firewall > Intrusion Detection and in there check the 3 items referring to "Intrusion Detection Feature". Finally, in "Stateful Packet Inspection" check the 5 items as well. Your router will not respond to pings anymore.

My firewall is disabled in the router,if i enable it,some of my programs wont work right...

The only way i can do this is to have the firewall enabled??

Bull ticky!!
reply

zigzagpt @ 18th Oct 07:09AM:
Re: SMC ROUTER QUESTION

Sorry for the late reply. Huge time differences. IMHO, yes. You must enable the router firewall. Once you say some programs won't work right just to NAT > enable it. Next into Virtual Server give access (I mean) open ports to the ones you say are giving you troubles. Just remember, in order to access the virtual server you must have javascripts enabled. Hope it'll be of help.
reply

Dude111 @ 18th Oct 05:22PM:
Re: SMC ROUTER QUESTION

uugghh.....

Thank you :)
reply

Dude111 @ 20th Oct 11:08PM:
Re: SMC ROUTER QUESTION

How about if i do this.....

If i goto this page

»192.168.0.1/admin/firewall_a.asp

and check the box that says "Enable Access Control" and leave the 2 boxs UNCHECKED at the bottom that says "Respond to pings",will that work even though the firewall is disabled??

PINGS SHOULD NOT BE RESPONDED TO UNLESS THOSE BOXS ARE CHECKED!! (Regardless)
reply

zigzagpt @ 22nd Oct 07:12AM:
Re: SMC ROUTER QUESTION

In my router and regarding the "Access control" the "Enable Filtering Function" feature has been checked by default. I didn't mess with it.
Frankly, I still don't get why you don't wanna enable the router firewall. Just remember that an hardware firewall is safer than a software one. Even though, you can have both without conflicts.
The way I've described above has been working for me.
reply

Dude111 @ 22nd Oct 09:10PM:
Re: SMC ROUTER QUESTION

I suppose i could but i might have issues again with VOIPERIZED im not sure.....

So on yours "Enable Access control" is checked w/o you checking it?

Im wondering if checking this WITHOUT THE FIREWALL ENABLED would prevent pings from being responded to. (Which is the best way)
reply

zigzagpt @ 23rd Oct 01:47PM:
Re: SMC ROUTER QUESTION

As to Voiperized issue you already know that it uses UDP 4379, right? So, it's in the "Access Control" where you should have configured the above mentioned port.
In the other thread I also notice you've been playing with several router settings including DMZ. If you aren't an expert I advise you not to touch it. DMZ is disabled by default for a reason. "Access control" feature is safer than DMZ.
For me, SMC has been almost like a plug and play router. No big fuss! Playing around with too much settings will give troubles in return.
Here in Europe SMC has a free call support line. My suggestion: get the one in USA and they'll help you better. My guess is that you must start from the beginning.
Last note: if all your ports are stealthed how do they respond to pings? strange...
reply

Dude111 @ 23rd Oct 08:47PM:
Re: SMC ROUTER QUESTION

Because the SMC ROUTER is responding to the ping NOT MY COMPUTER (Yes i have EVERY PORT stealthed and i used to pass the GRC (OR any other test) 100% before getting this piece of crap)
reply