I use GRC.com to test ports externally for stealth. When using TL-R600VPN in bridge mode (PPPoE), the test for stealth shows 2 out of 3 for response, the router still responds to "solicited" packets.