Disabling ICMP echo and incoming response
I get this on Sheilds Up Gibson webpage. I use Bitdfefender Ultimate , and they do not seem to be able to give me a solution that works. I was wondering if anyone on this forum can help me configure this at the router level. Thanks. "Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation."
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Uncheck remote ICMP ping here:
When you disable the remote ICMP ping, your DSL modem router won't respond to the outside ICMP echo requests.
- Copy Link
- Report Inappropriate Content
@terziyski . Thanks so much. However, the remote box was already unchecked. Only the local box was checked.
I do appreciate your advice
Best wishes
Geoff Pearce
- Copy Link
- Report Inappropriate Content
Good point blocking ICMP echo is definitely a smart move for security. Sometimes a quick router Reload after changing the settings helps apply the firewall rules properly.
- Copy Link
- Report Inappropriate Content
oboist2 wrote
@terziyski . Thanks so much. However, the remote box was already unchecked. Only the local box was checked.
I do appreciate your advice
Best wishes
Geoff Pearce
@oboist2 You can try upgrading your firmware to see if it's not already fixed.
*Make sure your model is V1 European, as this firmware has "V1 EU" in its name*
This page has a newer version:
*Make sure your model is V1 European, as this firmware has "V1 EU" in its name*
- Copy Link
- Report Inappropriate Content
@oboist2 Thanks, However, I am in Australia and this is what my firmwear is and it is up to date: Firmware: 1.8.0 0.9.1 v009e.0 Build 230705 Rel.12787n, Hardware version: Archer VR2100 v1 00000000. I hope this clarifies.Best wishes
Geoff
- Copy Link
- Report Inappropriate Content
@lucasdemon7 Thanks but I have not changed anything. I did try rebooting though.
- Copy Link
- Report Inappropriate Content
Even though you're in Australia you can use the EU FW release. So if you update to the latest release it should be prefectly safe.
Apart from that, if your ISP is using a CG-NAT, even though you've disabled remote ICMP echo requests, you may still receive this message, but this doesn't mean your router is vulnerable to the threads described in the message.
- Copy Link
- Report Inappropriate Content
@terziyski Thanks, however when I tried to apply that firmware, the router rejected it. Is that because I have the latest one installed already for my region? Would I need to do a factory reset and then try and apply it?
- Copy Link
- Report Inappropriate Content
No, you don't have to reset your modem to update its FW.
On the Australian support portal this is the latest published FW release:
As you can see it's an EU region based FW/
So updating with the EU region FW from the global english support portal is normal.
Just double check your VR2100 modem bottom sticker for its region - details.
Follow the procedure for updating FW that I posted - you have to use the unzipped .bin file.
- Copy Link
- Report Inappropriate Content
@terziyski Thanks, I have done that. The remote ICMP was not ticked in the first place and I am still getting the message in "Shields Up" I guess then that it is not at the ro9uter level that is causing this, amd I thank you for your efforts and replies.
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 458
Replies: 10
Voters 0
No one has voted for it yet.