File Sharing?

[Greg Strong]

I completed the GRC file sharing test at
http://grc.com/x/ne.dll?rh1dkyd2 and received the a message which
appears that I have a problem with security on my PC. See message
below.

,----- [ File Sharing Result ]
| Attempting connection to your computer. . . Shields UP! is now
| attempting to contact the Hidden Internet Server within your PC. It is
| likely that no one has told you that your own personal computer may now
| be functioning as an Internet Server with neither your knowledge nor
| your permission. And that it may be serving up all or many of your
| personal files for reading, writing, modification and even deletion by
| anyone, anywhere, on the Internet!
`-----

Since I have a cable connection I have disabled "Client for Microsoft
Networks" and "File and Print Sharing for Microsoft Networks" in
properties for my "Local Area Connection" doesn't do the trick because
I'm still getting the same message when I complete the file sharing
test.

Any ideals how to address the issue?

Thanks!

Regards,


Greg Strong

Regards,


Greg Strong

[Ionizer]

"Greg Strong" > wrote in message
...
> I completed the GRC file sharing test at
> http://grc.com/x/ne.dll?rh1dkyd2 and received the a message which
> appears that I have a problem with security on my PC. See message
> below.
>
> ,----- [ File Sharing Result ]
> | Attempting connection to your computer. . . Shields UP! is now
> | attempting to contact the Hidden Internet Server within your PC. It is
> | likely that no one has told you that your own personal computer may now
> | be functioning as an Internet Server
<snip>

That's just the standard text on that page after that particular scan. What
are the results immediately below that text, though? They refer to port 139
and NetBIOS connection attempts.

Run the *full* Shields Up scan- click on the "All service ports" button and
wait a couple of minutes. The results of that scan *should* indicate that
you are fully-stealthed, assuming that you have a firewall installed and
running. You DO have a firewall running, right? If you are using
WindowsXP, try using the built-in firewall:
http://www.theeldergeek.com/internet_connection_firewall.htm

Regards,
Ian.

[Ramesh [MVP]]

Greg,

This is a general text for users and not the test results.=20

Learn about firewalls:
http://www.mvps.org/sramesh2k/firewall.htm

--=20
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
How to block Pop-ups?:=20
http://www.mvps.org/sramesh2k/Popups.htm

Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://www.mvps.org/sramesh2k/toolbarcop.htm
-------------------------------------------


"Greg Strong" > wrote in message =
...
I completed the GRC file sharing test at
http://grc.com/x/ne.dll?rh1dkyd2 and received the a message which
appears that I have a problem with security on my PC. See message
below.

,----- [ File Sharing Result ]
| Attempting connection to your computer. . . Shields UP! is now
| attempting to contact the Hidden Internet Server within your PC. It is
| likely that no one has told you that your own personal computer may =
now
| be functioning as an Internet Server with neither your knowledge nor
| your permission. And that it may be serving up all or many of your
| personal files for reading, writing, modification and even deletion by
| anyone, anywhere, on the Internet!
`-----

Since I have a cable connection I have disabled "Client for Microsoft
Networks" and "File and Print Sharing for Microsoft Networks" in
properties for my "Local Area Connection" doesn't do the trick because
I'm still getting the same message when I complete the file sharing
test. =20

Any ideals how to address the issue?

Thanks!

Regards,


Greg Strong

Regards,


Greg Strong

[Greg Strong]

On Sun, 11 Jan 2004 02:19:32 -0500, "Ionizer" >
wrote:

>That's just the standard text on that page after that particular scan. What
>are the results immediately below that text, though? They refer to port 139
>and NetBIOS connection attempts.]

,----- [ Results ]
| Attempting connection to your computer. . .
| Shields UP! is now attempting to contact the Hidden Internet Server
| within your PC. It is likely that no one has told you that your own
| personal computer may now be functioning as an Internet Server with
| neither your knowledge nor your permission. And that it may be serving
| up all or many of your personal files for reading, writing, modification
| and even deletion by anyone, anywhere, on the Internet!
|
| Your Internet port 139 does not appear to exist!
| One or more ports on this system are operating in FULL STEALTH MODE!
| Standard Internet behavior requires port connection attempts to be
| answered with a success or refusal response. Therefore, only an attempt
| to connect to a nonexistent computer results in no response of either
| kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's
| very cool!) which represents advanced computer and port stealthing
| capabilities. A machine configured in this fashion is well hardened to
| Internet NetBIOS attack and intrusion.
|
| Unable to connect with NetBIOS to your computer.
| All attempts to get any information from your computer have FAILED.
| (This is very uncommon for a Windows networking-based PC.) Relative to
| vulnerabilities from Windows networking, this computer appears to be
| VERY SECURE since it is NOT exposing ANY of its internal NetBIOS
| networking protocol over the Internet.
`-----

>
>Run the *full* Shields Up scan- click on the "All service ports" button and
>wait a couple of minutes. The results of that scan *should* indicate that
>you are fully-stealthed, assuming that you have a firewall installed and
>running. You DO have a firewall running, right? If you are using
>WindowsXP, try using the built-in firewall:
>http://www.theeldergeek.com/internet_connection_firewall.htm


----------------------------------------------------------------------

GRC Port Authority Report created on UTC: 2004-01-11 at 16:50:24

Results from scan of ports: 0-1055

0 Ports Open
0 Ports Closed
1056 Ports Stealth
---------------------
1056 Ports Tested

ALL PORTS tested were found to be: STEALTH.

TruStealth: PASSED - ALL tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received.

----------------------------------------------------------------------

What can I say? It was the wording of the first part of the file
sharing test which led to the question. IMHO I do not think it is quite
clear.


Regards,


Greg Strong

[Greg Strong]

On Sun, 11 Jan 2004 13:59:36 +0530, "Ramesh [MVP]"
> wrote:

>This is a general text for users and not the test results.

I read the test wrong the first time, and did not include the results in
my original question. So I have included them in an earlier reply. See
Message-ID:

>Learn about firewalls:
>http://www.mvps.org/sramesh2k/firewall.htm

I already have Kerio 2.15 installed. IMHO the wording of the test could
be changed because it is a little misleading. After inquiring in
several newsgroups I now understand where my error was in my
interpretation.

Regards,


Greg Strong

[Ionizer]

"Greg Strong" > wrote in message
...
> Results from scan of ports: 0-1055
>
> 0 Ports Open
> 0 Ports Closed
> 1056 Ports Stealth
> ---------------------
> 1056 Ports Tested
>
> ALL PORTS tested were found to be: STEALTH.
>
> TruStealth: PASSED - ALL tested ports were STEALTH,
> - NO unsolicited packets were received,
> - NO Ping reply (ICMP Echo) was received.
>
> ----------------------------------------------------------------------
>
> What can I say? It was the wording of the first part of the file
> sharing test which led to the question. IMHO I do not think it is quite
> clear.

The main thing is that you now know that your system is well-protected.
Steve Gibson's scan is very thorough.

Regards,
Ian.

[Ramesh [MVP]]

Scan results looks OK. Your system is completely stealth.

--=20
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
About Firewalls - Windows XP ICF:=20
http://www.mvps.org/sramesh2k/firewall.htm

How to block Pop-ups?:=20
http://www.mvps.org/sramesh2k/Popups.htm

Using ToolbarCop to remove the unwanted Toolband, Toolbar Icons and BHO:
http://www.mvps.org/sramesh2k/toolbarcop.htm
-------------------------------------------


"Greg Strong" > wrote in message =
...
On Sun, 11 Jan 2004 02:19:32 -0500, "Ionizer" >
wrote:

>That's just the standard text on that page after that particular scan. =
What
>are the results immediately below that text, though? They refer to =
port 139
>and NetBIOS connection attempts.]

,----- [ Results ]
| Attempting connection to your computer. . .
| Shields UP! is now attempting to contact the Hidden Internet Server
| within your PC. It is likely that no one has told you that your own
| personal computer may now be functioning as an Internet Server with
| neither your knowledge nor your permission. And that it may be serving
| up all or many of your personal files for reading, writing, =
modification
| and even deletion by anyone, anywhere, on the Internet!
|=20
| Your Internet port 139 does not appear to exist!
| One or more ports on this system are operating in FULL STEALTH MODE!
| Standard Internet behavior requires port connection attempts to be
| answered with a success or refusal response. Therefore, only an =
attempt
| to connect to a nonexistent computer results in no response of either
| kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's
| very cool!) which represents advanced computer and port stealthing
| capabilities. A machine configured in this fashion is well hardened to
| Internet NetBIOS attack and intrusion.
|=20
| Unable to connect with NetBIOS to your computer.
| All attempts to get any information from your computer have FAILED.
| (This is very uncommon for a Windows networking-based PC.) Relative to
| vulnerabilities from Windows networking, this computer appears to be
| VERY SECURE since it is NOT exposing ANY of its internal NetBIOS
| networking protocol over the Internet.
`-----

>
>Run the *full* Shields Up scan- click on the "All service ports" button =
and
>wait a couple of minutes. The results of that scan *should* indicate =
that
>you are fully-stealthed, assuming that you have a firewall installed =
and
>running. You DO have a firewall running, right? If you are using
>WindowsXP, try using the built-in firewall:
>http://www.theeldergeek.com/internet_connection_firewall.htm


----------------------------------------------------------------------

GRC Port Authority Report created on UTC: 2004-01-11 at 16:50:24

Results from scan of ports: 0-1055

0 Ports Open
0 Ports Closed
1056 Ports Stealth
---------------------
1056 Ports Tested

ALL PORTS tested were found to be: STEALTH.

TruStealth: PASSED - ALL tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received.

----------------------------------------------------------------------
=20
What can I say? It was the wording of the first part of the file
sharing test which led to the question. IMHO I do not think it is quite
clear.


Regards,


Greg Strong