The firewall cannot achieve perfect internet stealth with ICS enabled.

[The Black Wibble]

When ICS is enabled, I can't get Windows XP Pro (SP2 v.2149) to stop
replying to ping (ICMP echo) requests from the ~Internet~. I'm using the
ShieldsUP!! port scanner at grc.com, and the Windows firewall would pass
the stealth test if it weren't for that one flaw. Can someone else please verify
this is the case?

Here are my firewall settings.

Advanced tab -> ICMP settings: "Allow incoming Echo requests" is set
and can't be unset when using ICS. All others are unset.

Advanced tab -> Internet Connection -> Settings: no services are selected
and all ICMP options are unset.

Tony.

 

[The Black Wibble]

So... The answer is to create a policy to block pings from the internet
using IPSec.

http://www.petri.co.il/block_ping_traffic_with_ipsec.htm

My computer has passed the stealth test according to the port
scanner at grc.com. ) I might study this IPSec thing more
closely. It looks interesting.

Tony.