Disable ICMP echo request with Windows Firewall?

duragezic

Lifer
Oct 11, 1999
11,234
4
81
I just moved and don't have a router of my own (need to research if I can buy one locally that is good and will take DD-WRT or if I'll need to order it) yet. I am plugged into a cable modem in a hotel room. I ran the ShieldsUP tests and most everything came back as decently secure except the ICMP ping reply failed, since it did respond to it. I am using the Windows Firewall with only exceptions for programs I use.

Sure enough, in the ICMP Settings, the box for 'Allow incoming echo request' is checked, but it won't let me disable it. The description says it is automatically allowed if TCP port 445 is enabled.

So I guess I have a few questions:

Is this a secure enough setup until I get a router? If not, is there anything better I could do with software or Windows Firewall configuration?

Is the ICMP echo actually a significant risk? If so, I'd like to disable it, but I don't see in Windows Firewall on how to disable TCP port 445 (which would then allow me to disable the echo req).
 

RebateMonger

Elite Member
Dec 24, 2005
11,586
0
0
In your situation, I wouldn't worry about your PC returning a "Ping". There are lots of ways to find PCs on a network, and Ping is only one of them. As long as you have a firewall enabled and keep Windows Updates current, Ping wouldn't bother me in your situation.
 

spidey07

No Lifer
Aug 4, 2000
65,469
5
76
I wouldn't worry about it either. The reason why it's preventing you to allow it is because some parts of windows/AD networking rely on pings. Specifically 445.