Firewall GRC.com test shows up as non stealth with ASUS router

[yorgi]

I ran a grc.com shields up tests on my router and to my surprise I didn't get stealth.
there where a few ports show as closed; 135,445,646,711
everything else went stealth
Any ideas how we can make our asus routers show as full stealth
My router is the 87u

?

 

[System Error Message]

Using iptables, add the drop command to the input chain for those ports.

 

[Nullity]

I ran a grc.com shields up tests on my router and to my surprise I didn't get stealth.
there where a few ports show as closed; 135,445,646,711
everything else went stealth
Any ideas how we can make our asus routers show as full stealth
My router is the 87u

View attachment 5657 ?

That is a strange result, but not a "real" problem.

AFAIK, the TCP (UDP?) spec defines two ways of rejecting connection attempts; responsive or unresponsive. The responsive method is worse simply because it allows someone to know you exist... there is no actual security problem (excepting "security through obscurity").

Yes, maybe you are less than optimal, but really, the results of your scan are unconcerning.

 

[yorgi]

Using iptables, add the drop command to the input chain for those ports.

Would you be kind enough to give me an example of an ip table that would drop port 426?
I guess I would load it as a firewall script on my asus merlin router for those 5 ports?

 

[yorgi]

That is a strange result, but not a "real" problem.

AFAIK, the TCP (UDP?) spec defines two ways of rejecting connection attempts; responsive or unresponsive. The responsive method is worse simply because it allows someone to know you exist... there is no actual security problem (excepting "security through obscurity").

Yes, maybe you are less than optimal, but really, the results of your scan are unconcerning.

I agree with you but it still bothers me that they are not all stealth therefore if I can make it stealth I would be happier

 

[sfx2000]

I ran a grc.com shields up tests on my router and to my surprise I didn't get stealth.
there where a few ports show as closed; 135,445,646,711

Check what services on running on the Router/AP - some of these are a bit worrisome - but might be upstream honeypots by your ISP/VPN Provider..

Port scans by guys like GRC (which are awesome, FWIW) only see your IP as an end-point, so anything in the middle might be flagged...

 

[RMerlin]

They show as non-stealth because your ISP is actively dropping those ports. Nothing you can do about (and nothing to worry about either).