Here is a test I just did. How can I set ESS to stealth these ports? I unplugged PC from router and went direct to that the Firewall would be tested not the router as told in other post.
Are you running on Automatic or Interactive mode?? If you are connected thru a NAT router did you put your machine in the DMZ? if not then pcflanks is not testing ESS but the router.
Do you have any particular rules for ICMP?? My logs show from time to time an ICMP message with the legend "no usable rule found" and so they are blocked because I didn't set up a rule so the firewall discards them autoamticaly. You could enable the option to log all blocked connections and see if there are any inconsistances. I also disabled NetBIOS on the nic that is connected to the router to maximize security, you could try that.