How Secure Is YOUR Computer?

[Jelly]

Well, when it comes to computers, I'm big on keeping them up-to-date and well maintained.

Anyways, how secure do you believe your computer is? Here's a quick test you can run that will let you know how you're currently doing:

https://grc.com/x/ne.dll?bh0bkyd2

Go here, then click "proceed", then click on "common ports".

Here is what I got:
Your system has achieved a perfect "TruStealth" rating. Not a single packet — solicited or otherwise — was received from your system as a result of our security probing tests. Your system ignored and refused to reply to repeated Pings (ICMP Echo Requests). From the standpoint of the passing probes of any hacker, this machine does not exist on the Internet. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system wisely remained silent in every way. Very nice.

Let us know how you do...

 

[ALS]

TruStealth across the board on my system.

 

[seotaji]

if you use windows xp make sure that you download the new patches coming out soon.

 

[Al]

quote:

---

Originally posted by ALS:
TruStealth across the board on my system.

---

Same here. I guess my router is working.

 

[Jelly]

Geeezzz, look at how the computer I use at work did!

You'd think a VERY LARGE company as the one I work for would invest in some good security protection!

Solicited TCP Packets: RECEIVED (FAILED) — As detailed in the port report below, one or more of your system's ports actively responded to our deliberate attempts to establish a connection. It is generally possible to increase your system's security by hiding it from the probes of potentially hostile hackers. Please see the details presented by the specific port links below, as well as the various resources on this site, and in our extremely helpful and active user community.

Unsolicited Packets: PASSED — No Internet packets of any sort were received from your system as a side-effect of our attempts to elicit some response from any of the ports listed above. Some questionable personal security systems expose their users by attempting to "counter-probe the prober", thus revealing themselves. But your system remained wisely silent. (Except for the fact that not all of its ports are completely stealthed as shown below.)

Ping Reply: RECEIVED (FAILED) — Your system REPLIED to our Ping (ICMP Echo) requests, making it visible on the Internet. Most personal firewalls can be configured to block, drop, and ignore such ping requests in order to better hide systems from hackers. This is highly recommended since "Ping" is among the oldest and most common methods used to locate systems prior to further exploitation.

[ June 08, 2004, 03:28 PM: Message edited by: Jelly ]

 

[cryptokid]

well i have a router, external firewall, and often use a proxy to view websites so that my ip becomes hidden and another ip from another country shows up instead of mine.

i passed the test.

 

[Shannow]

Perfect also.

(however, they probably timed out on my dialup)

 

[keith]

There are many reasons for so called "failure" running those tests. If you run an FTP (ports 20, 21) or HTML (port 80) server, the PC will "fail" because those ports have to be open. If you use a proxy server to connect externally, the proxy can have open ports that will "fail" even though the originating PC is secure.

The test itself is fine, just don't jump to conclusions when it says you have "failed".

Keith.

 

[sbc350gearhead]

Wow.....the link won't even work for me. My comp must really suck.

 

[Jelly]

quote:

---

Originally posted by keith:
There are many reasons for so called "failure" running those tests. If you run an FTP (ports 20, 21) or HTML (port 80) server, the PC will "fail" because those ports have to be open. If you use a proxy server to connect externally, the proxy can have open ports that will "fail" even though the originating PC is secure.

The test itself is fine, just don't jump to conclusions when it says you have "failed".

Keith.

---

I fully understand what you're saying, but if you do have those ports open, then your PC is not secure...people can gain access through the FTP and HTML servers.

 

[Pablo]

My work PC easily passed the whole thing.

BUT - my home ISP dial-up PC failed this portion (but passes with all ports stealthily blocked ):

"Unsolicited Packets: RECEIVED (FAILED) — Your system's personal security countermeasures unwisely attempted to probe us in response to our probes. While some users believe that "tracking down" the source of Internet probes is useful, experience indicates that there is little to gain and potentially much to lose. The wisest course of action is to simulate nonexistence — which your system has failed to do. Your counter-probes immediately reveal your system's presence and location on the Internet."

I have the tracing portion of my firewall turned completely OFF. Is this something my ISP might be doing? I want to stay low key...can you guys help me?

 

[wwillson]

quote:

---

Originally posted by Jelly:

quote:

---

Originally posted by keith:
There are many reasons for so called "failure" running those tests. If you run an FTP (ports 20, 21) or HTML (port 80) server, the PC will "fail" because those ports have to be open. If you use a proxy server to connect externally, the proxy can have open ports that will "fail" even though the originating PC is secure.

The test itself is fine, just don't jump to conclusions when it says you have "failed".

Keith.

---

I fully understand what you're saying, but if you do have those ports open, then your PC is not secure...people can gain access through the FTP and HTML servers.

---

Go ahead and scan my external address: 64.233.251.85

It will show that ssh and smtp are open - they are. This is my firewall that I need to access via ssh and is also my email server. It is a UNIX box and has been hardend with my own custom iptables script and hardend by the fact that I know a bit about UNIX administration.

Go ahead and try to get to one of my internal PC's

 

[Pablo]

Never mind. I just realized that my firewall settings wouldn't change until I re-booted....my bad. Problem fixed.

 

[keith]

quote:

---

Originally posted by Jelly:
I fully understand what you're saying, but if you do have those ports open, then your PC is not secure...people can gain access through the FTP and HTML servers.

---

Then close the ports and be "secure". The next user to (failed) connect to the FTP server won't be too happy though. According to that site, every FTP and Web server in the world is insecure. Presumably they then need to buy some extra security from Gibson Research? LOL.

Keith.

 

[Matt_S]

The scanner found port 113 as "Closed", and failed me. I clicked on the port number, though, and it told me how to configure my router so that it would appear invisible and discussed all the possible ramifications. Very cool. I made the change and passed.

 

[Jelly]

quote:

---

Originally posted by Matt_S:
The scanner found port 113 as "Closed", and failed me. I clicked on the port number, though, and it told me how to configure my router so that it would appear invisible and discussed all the possible ramifications. Very cool. I made the change and passed.

---

Very cool indeed!

Glad I could help (well, link you to a site).

 

[Jelly]

Wwillson...What I said before was wrong. I apologize for saying your computer wouldn't be secure .

And Keith...it's not some "conspiracy" to get you to buy any Gibson Research products!!! It's just a free tool to see how your doing.

Well, at least I helped Pabs out.