Looknstop counter probe ?

Discussion in 'LnS English Forum' started by trippinhard, Jul 31, 2003.

Thread Status:
Not open for further replies.
  1. trippinhard

    trippinhard Registered Member

    Joined:
    Jul 21, 2003
    Posts:
    8
    i just did a scan over at
    https://nanoprobe.grc.com/x/ne.dll?bh0bkyd2
    and i passed everything except for this message which i got for one of the tests
    Unsolicited Packets: RECEIVED (FAILED) — Your system's personal security countermeasures unwisely attempted to probe us in response to our probes. While some users believe that "tracking down" the source of Internet probes is useful, experience indicates that there is little to gain and potentially much to lose. The wisest course of action is to simulate nonexistence — which your system has failed to do. Your counter-probes immediately reveal your system's presence and location on the Internet.

    Im using the july 18 ruleset for dialup which one of these rules is causing this so i can remove or adjust it ?

    Also as to not start another thread since the application filtering for lns isnt as advanced as letting programs out only on certain ports and i use a proxy could it result in another program sneaking out through it
    thanks
     
  2. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey trippinhard

    I believe it might be fault of the Scanning System and not of the rule-set; which test exactly shown that?
     
  3. trippinhard

    trippinhard Registered Member

    Joined:
    Jul 21, 2003
    Posts:
    8
    i did the all service ports test
    hmm i wonder why it would be i dont really remember this happening before
     
  4. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey trippinhard

    Was there any shown "Open" ports?
    Or was there indications of yo machine responding to the ICMP Echos ?

    You Add or Modify the rule-set beyond what was mentioned ?
     
  5. trippinhard

    trippinhard Registered Member

    Joined:
    Jul 21, 2003
    Posts:
    8
    i havent modified anything except for the dns rule including the correct ip Last time all ports were stealth but below it showed a fail and that message i posted , but wierd i retook the test just to double check and everything is fine now i got no warning about it , i cant understand that lol everything is fine now i think...
     
  6. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    LOL... that's what i figured :)
     
  7. trippinhard

    trippinhard Registered Member

    Joined:
    Jul 21, 2003
    Posts:
    8
    well thanks again youve always answered my questions when i had one
     
  8. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey trippinhard

    Are you in Reference to connecting to webservers through a proxy server or through a Proxy Tunnelling System like Adsubtract?

    Well whenever I’m around I try my best to Acknowledge people’s posts and assist anyway possible…
     
  9. trippinhard

    trippinhard Registered Member

    Joined:
    Jul 21, 2003
    Posts:
    8
    im using proxomitron
     
  10. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Alright; There's no known security issue using proxomitron at least not to my knowledge...
     
Thread Status:
Not open for further replies.