how to turn firewall down

fsshl_at_yahoo.com
Date: 03/04/05

Next message: Gian: "cannot ping WLan access point"
Previous message: Santiago Copano: "Re: search for windows shares"
Next in thread: Baho Utot: "Re: how to turn firewall down"
Reply: Baho Utot: "Re: how to turn firewall down"
Reply: SEND NO SPAM: "Re: how to turn firewall down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Date: 3 Mar 2005 23:00:22 -0800

I am try to using aol assign's public ip to broadcast web (aol on
broadband_, but I had difficult to ping or trace (from
www.network-tools.com) it, it reponse timeout, nmap too, it said can
not ping that ip, and all ports are filtered.

the following is my test on firewall I had. please help to turn all my
firewall down. thnks in advance.
----------------------------------------------------------------
eric lin@outlawinn
/cygdrive/c/Docume~1/ericli~1/MyDocu~1/nmap/nmap-3.81
$ ./nmap.exe -P0 172.199.101.126

Starting nmap 3.81 ( http://www.insecure.org/nmap ) at 2005-03-01 01:24
Mountain Standard Time
All 1663 scanned ports on outlawinn (172.199.101.126) are: filtered

Nmap finished: 1 IP address (1 host up) scanned in 336.314 seconds
------------------------------------------------------------------------------

and my firewall state and config

eric lin@outlawinn ~
$ netsh firewall show config

Domain profile configuration:
--------------------------------------------------------------------
Operational mode = Enable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable

Allowed programs configuration for Domain profile:
Mode Name / Program
--------------------------------------------------------------------
Enable Remote Assistance / C:\WINDOWS\system32\sessmgr.exe
Enable America Online 9.0 / C:\Program Files\America Online
9.0\waol.exe

Standard profile configuration (current):
--------------------------------------------------------------------
Operational mode = Disable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable

ICMP configuration for Standard profile:
Mode Type Description
--------------------------------------------------------------------
Enable 2 Allow outbound packet too big
Enable 3 Allow outbound destination unreachable
Enable 4 Allow outbound source quench
Enable 5 Allow redirect
Enable 8 Allow inbound echo request
Enable 9 Allow inbound router request
Enable 11 Allow outbound time exceeded
Enable 12 Allow outbound parameter problem
Enable 13 Allow inbound timestamp request
Enable 17 Allow inbound mask request

Log configuration:
--------------------------------------------------------------------
File location = C:\WINDOWS\pfirewall.log
Max file size = 4096 KB
Dropped packets = Disable
Connections = Disable

Local Area Connection firewall configuration:
--------------------------------------------------------------------
Operational mode = Disable

Wireless Network Connection firewall configuration:
--------------------------------------------------------------------
Operational mode = Disable

Wireless Network Connection 2 firewall configuration:
--------------------------------------------------------------------
Operational mode = Enable

Port configuration for Wireless Network Connection 2:
Port Protocol Mode Name
--------------------------------------------------------------------
143 TCP Enable Internet Mail Access Protocol Version 4
(IMAP4)
443 TCP Enable Secure Web Server (HTTPS)
23 TCP Enable Telnet Server
110 TCP Enable Post-Office Protocol Version 3 (POP3)
80 TCP Enable Web Server (HTTP)
21 TCP Enable FTP Server
3389 TCP Enable Remote Desktop
25 TCP Enable Internet Mail Server (SMTP)
220 TCP Enable Internet Mail Access Protocol Version 3
(IMAP3)

ICMP configuration for Wireless Network Connection 2:
Mode Type Description
--------------------------------------------------------------------
Enable 3 Allow outbound destination unreachable
Enable 4 Allow outbound source quench
Enable 5 Allow redirect
Enable 8 Allow inbound echo request
Enable 9 Allow inbound router request
Enable 11 Allow outbound time exceeded
Enable 12 Allow outbound parameter problem
Enable 13 Allow inbound timestamp request
Enable 17 Allow inbound mask request

-----------------------------------------------------------------------

America Online firewall configuration:
--------------------------------------------------------------------
Operational mode = Enable

Port configuration for America Online:
Port Protocol Mode Name
--------------------------------------------------------------------
25 TCP Enable Internet Mail Server (SMTP)
3389 TCP Enable Remote Desktop
110 TCP Enable Post-Office Protocol Version 3 (POP3)
21 TCP Enable FTP Server
443 TCP Enable Secure Web Server (HTTPS)
220 TCP Enable Internet Mail Access Protocol Version 3
(IMAP3)
23 TCP Enable Telnet Server
80 TCP Enable Web Server (HTTP)
143 TCP Enable Internet Mail Access Protocol Version 4
(IMAP4)

ICMP configuration for America Online:
Mode Type Description
--------------------------------------------------------------------
Enable 3 Allow outbound destination unreachable
Enable 4 Allow outbound source quench
Enable 5 Allow redirect
Enable 8 Allow inbound echo request
Enable 9 Allow inbound router request
Enable 11 Allow outbound time exceeded
Enable 12 Allow outbound parameter problem
Enable 13 Allow inbound timestamp request
Enable 17 Allow inbound mask request

------------------------------------------------------------------------

netsh firewall show state

Firewall status:
--------------------------------------------------------------------
Profile = Standard
Operational mode = Disable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable
Group policy version = None
Remote admin mode = Disable

Ports currently open on all network interfaces:
Port Protocol Version Program
--------------------------------------------------------------------
No ports are currently open on all network interfaces.

Additional ports open on Wireless Network Connection 2:
Port Protocol Version
--------------------------------------------------------------------
21 TCP Any
23 TCP Any
25 TCP Any
80 TCP Any
110 TCP Any
143 TCP Any
220 TCP Any
443 TCP Any
3389 TCP Any

--------------------------------------------------------------------------

eric lin@outlawinn ~
$ ipconfig /all

Windows IP Configuration

        Host Name . . . . . . . . . . . . : outlawinn
        Primary Dns Suffix . . . . . . . :
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection 2:

        Connection-specific DNS Suffix . :
        Description . . . . . . . . . . . : ORiNOCO Wireless LAN PC
Card (5 volt
)
        Physical Address. . . . . . . . . : 00-02-2D-93-73-C9
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 192.168.100.155
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.100.1
        DNS Servers . . . . . . . . . . . : 192.168.100.1

PPP adapter {7065F1D9-7082-4846-8A31-5BBFC3BD53E1}:

        Connection-specific DNS Suffix . :
        Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
        Physical Address. . . . . . . . . : 00-53-45-00-00-00
        Dhcp Enabled. . . . . . . . . . . : No
        IP Address. . . . . . . . . . . . : 172.199.101.126
        Subnet Mask . . . . . . . . . . . : 255.255.255.255
        Default Gateway . . . . . . . . . :
        DNS Servers . . . . . . . . . . . : 198.81.19.4
        NetBIOS over Tcpip. . . . . . . . : Disabled

----------------------------------------------------------------------------

eric lin@outlawinn ~

$ cat /etc/services | grep -e ^http -e ^ftp -e ^ssh | grep tcp

ftp-data 20/tcp #FTP, data

ftp 21/tcp #FTP. control

http 80/tcp www www-http #World Wide Web

https 443/tcp MCom

eric lin@outlawinn ~

$ netstat -a | grep "t;http"

TCP outlawinn:http outlawinn:0 LISTENING

eric lin@outlawinn ~

Next message: Gian: "cannot ping WLan access point"
Previous message: Santiago Copano: "Re: search for windows shares"
Next in thread: Baho Utot: "Re: how to turn firewall down"
Reply: Baho Utot: "Re: how to turn firewall down"
Reply: SEND NO SPAM: "Re: how to turn firewall down"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Relevant Pages

Re: R2 in-place upgrade bug ? ..HELP
... Enable 3 Allow outbound destination unreachable ... Enable 9 Allow inbound router request ... ICMP configuration for Local Area Connection 7: ...
(microsoft.public.windows.server.active_directory)
Re: R2 in-place upgrade bug ? ..HELP
... Enable 3 Allow outbound destination unreachable ... Enable 9 Allow inbound router request ... ICMP configuration for Local Area Connection 7: ...
(microsoft.public.windows.server.active_directory)
Re: Cant Ping R2 server in same subnet, but can ping outside subnet.!!
... Enable 3 Allow outbound destination unreachable ... Enable 9 Allow inbound router request ... ICMP configuration for Local Area Connection 7: ...
(microsoft.public.security)
Re: Message deferrals from EHS
... this is for inbound messages. ... on the sending server, if we did not use EHS. ... And outbound messages bound for EHS are working fine? ...
(microsoft.public.exchange.connectivity)
WTF?? ISA 04 semantics inbound or outbound
... Does anyone else see the semantic differences between inbound and outbound ... For instance I have a server generated rule that is called SBS RWW inbound ... Same thing goes with SBS ftp server access rule. ...
(microsoft.public.windows.server.sbs)