Author Topic: ports in windows 10 "closed" and not "stealth"?  (Read 552 times)

Offline ris

  • Member
  • **
  • Posts: 3659
ports in windows 10 "closed" and not "stealth"?
« on: January 14, 2017, 07:49:52 PM »
not sure if it has something to do with the anniversary update, fiber connection or my firewall.  i just recently visited the shields up website to determine if my there are ports open on my ip address.  it seems i only have 2 ports in stealth mode while the others are closed.  from what i remember, before the anniversary update, all ports were "stealth" instead of "closed".  anybody here know a solution for this?  it kinda bothers me
To steal ideas from one person is plagiarism
To steal from many is research

Offline splerdu

  • Veterans
  • Member
  • ***
  • Posts: 7062
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #1 on: January 15, 2017, 02:28:25 AM »
"Closed" is the proper behaviour.

If you want "stealth" set your firewall to "drop" incoming packets instead of "deny".
fhtagn

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #2 on: January 15, 2017, 02:56:45 AM »
"Closed" is the proper behaviour.

If you want "stealth" set your firewall to "drop" incoming packets instead of "deny".

how do i do that?  i remember that i had set it to stealth before this.  im just not sure if its the anniversary update, new fiber internet or another thing that did this
To steal ideas from one person is plagiarism
To steal from many is research

Offline splerdu

  • Veterans
  • Member
  • ***
  • Posts: 7062
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #3 on: January 15, 2017, 05:46:36 AM »
If you have new internet it's most likely on that side. New router?

If it was Windows Firewall directly facing the internet it would have always showed up as "closed", as MS never gave teh option to drop packets without installing a third party firewall.
fhtagn

Offline calvin

  • Member
  • **
  • Posts: 6152
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #4 on: January 15, 2017, 10:14:08 AM »
your fiber connection might be behind a CGNAT hence the peculiar behavior.

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #5 on: January 15, 2017, 08:21:16 PM »
If you have new internet it's most likely on that side. New router?

If it was Windows Firewall directly facing the internet it would have always showed up as "closed", as MS never gave teh option to drop packets without installing a third party firewall.

yup.  new "pldt" router.  the black one.  fibr 1899 with frickin 10mbps upload.  dapat 20mbps eh

your fiber connection might be behind a CGNAT hence the peculiar behavior.

is there nothing i could do?  i have the black pldt fibr router
To steal ideas from one person is plagiarism
To steal from many is research

Offline calvin

  • Member
  • **
  • Posts: 6152
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #6 on: January 16, 2017, 02:30:58 AM »
^ nothing... basically, your fiber connection is behind a router on PLDT's side.

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #7 on: January 16, 2017, 09:16:32 AM »
^ nothing... basically, your fiber connection is behind a router on PLDT's side.

since its either closed or stealth im mostly protected right?
To steal ideas from one person is plagiarism
To steal from many is research

Offline calvin

  • Member
  • **
  • Posts: 6152
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #8 on: January 23, 2017, 04:59:17 PM »
from an outside attack yes...

but if the connection is initiated from your end... then you're still vulnerable

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #9 on: January 24, 2017, 05:23:36 PM »
on my end?  the ones in my district?  or is it someone from metro manila?  thanks
To steal ideas from one person is plagiarism
To steal from many is research

Offline splerdu

  • Veterans
  • Member
  • ***
  • Posts: 7062
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #10 on: January 24, 2017, 08:51:11 PM »
Meaning if there's malware or telemetry on your computer sending stuff out.

Closed/stealth ports only prevent attacks coming from the outside, but if you inadvertently install something yourself (through some dodgy plugins or websites) no amount of port configuration will protect you.
fhtagn

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #11 on: January 24, 2017, 09:39:27 PM »
Meaning if there's malware or telemetry on your computer sending stuff out.

Closed/stealth ports only prevent attacks coming from the outside, but if you inadvertently install something yourself (through some dodgy plugins or websites) no amount of port configuration will protect you.

well, im using windows 10 so.....  lolz!  but even stealth ports are not safe with the malware and telemetry.  i was wondering what is the difference of closed and stealth ports.  anyway, as long as my pc is safe i guess its okay
To steal ideas from one person is plagiarism
To steal from many is research

Offline splerdu

  • Veterans
  • Member
  • ***
  • Posts: 7062
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #12 on: January 25, 2017, 12:46:07 AM »
Say a computer initiates a connection to port 80 on a web server.

If the firewall has the port closed, it will reply with a 'denied' or 'closed' response.
A stealthed port will not reply at all and just drop the incoming connection request.

IMO you're paying way too much attention to GRC. Windows Firewall already closes all unused ports by default, and limits access to others (SMB, etc) according to your network settings (Work/Home/Public).
fhtagn

Offline ris

  • Member
  • **
  • Posts: 3659
Re: ports in windows 10 "closed" and not "stealth"?
« Reply #13 on: January 25, 2017, 10:02:13 AM »
Say a computer initiates a connection to port 80 on a web server.

If the firewall has the port closed, it will reply with a 'denied' or 'closed' response.
A stealthed port will not reply at all and just drop the incoming connection request.

IMO you're paying way too much attention to GRC. Windows Firewall already closes all unused ports by default, and limits access to others (SMB, etc) according to your network settings (Work/Home/Public).

i was just quite bothered that it changed to closed when it was stealth before.  lol!  hopefully, its nothing to worry about
To steal ideas from one person is plagiarism
To steal from many is research