I'm running Ubuntu Intrepid.
Shields Up shows port 22 as open and vulnerable. I have Firestarter ICMP Filtering set for NO response to echo requests (no ping or pong), but port 22 responds to Shields Up pings anyway. Is there a way to stealth port 22? I can figure out Firestarter better than other Linux Firewall guis, but it won't do what I want it to. I tried gufw and couldn't figure out how to manage it.

Thanks, zoey

well IS port 22 open? That's ssh if you're not aware. and an echo request IS ping (icmp type echo request) and won't relate to tcp sockets.

Yes, I did know that port 22 is ssh and it is the only port that Sheilds Up sees because it answers the ping even though Firestarter is set not to respond to any pings. LS ping gets me a cute little choo choo train that goes across and disappears without telling me anything in the terminal.

Thanks, zoey

a tcp port can not respond to a ping, it's a different protocol. There are things which may been seen to perform a similar function, e.g. attempting for a tcp half open, but not a ping. Can you clarify exactly what is happening and whether we are trying to address a tcp or icmp problem.

again though, IS ssh open?? If you're not sure, run "iptables -L -n -v" and show us the actual config firestarter has provided for you.

I may be concerned about nothing; I don't know enough to know whether it is a problem that I have Firestarter set to not respond to pings, but port 22 still does. Here is the output for iptables -L -n -V ;
margo@margo-desktop:~$ sudo iptables -L -n -v
[sudo] password for margo:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 24.220.0.10 0.0.0.0/0 tcp flags:!0x17/0x02
200 27761 ACCEPT udp -- * * 24.220.0.10 0.0.0.0/0
0 0 ACCEPT tcp -- * * 24.220.0.11 0.0.0.0/0 tcp flags:!0x17/0x02
0 0 ACCEPT udp -- * * 24.220.0.11 0.0.0.0/0
1294 62308 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:33434
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 1
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 17
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 18
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 5 limit: avg 2/sec burst 5
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4 limit: avg 2/sec burst 5
0 0 LSI icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- eth0 * 0.0.0.0/0 255.255.255.255
174 19023 DROP all -- * * 0.0.0.0/0 192.168.0.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
43188 61M INBOUND all -- eth0 * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Input'

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:33434
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 3 code 1
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 17
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 18
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 5 limit: avg 2/sec burst 5
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 4 limit: avg 2/sec burst 5
0 0 LSI icmp -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Forward'

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.0.11 24.220.0.10 tcp dpt:53
200 12921 ACCEPT udp -- * * 192.168.0.11 24.220.0.10 udp dpt:53
0 0 ACCEPT tcp -- * * 192.168.0.11 24.220.0.11 tcp dpt:53
0 0 ACCEPT udp -- * * 192.168.0.11 24.220.0.11 udp dpt:53
1294 62308 ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
2 124 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
57 2280 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
31314 2103K OUTBOUND all -- * eth0 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix `Unknown Output'

Chain INBOUND (1 references)
pkts bytes target prot opt in out source destination
43182 61M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
6 1968 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 LSI all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination

Chain LSI (4 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x04
0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Inbound '
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix `Outbound '
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable

Chain OUTBOUND (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
30944 2085K ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
370 18022 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
margo@margo-desktop:~$

Well there's no default deny, so unless i'm missing something all tcp connections coming in will be permitted outside of any rules there. so... IS SSH RUNNING? DOES SSH WORK?

Again, you can not "ping" port 22, we need to stop using incorrect language.

OK, here's the deal; you are posting to a 71 year old lady who discovered computers about 6 years ago and Linux about a year after that, so not only do I not always understand the answers that I get to my inquiries, I don't even understand the questions sometimes, but I am having a lot of fun just the same. I would never make it without all of the very helpful people on forums and the linux articles on the net. I don't know enough to use correct linux language but I learn more all the time. I would assume that I'm running ssh because it is installed and Sheilds Up 'sees' port 22 (is that correct?). All I know about ssh is that it seems to have something to do with passwords. ....I can hear you groaning from here : ).

Thanks, zoey

OK, well what is your internet architecture you're running there? This laptop is directly connected to the net? Not behind an adsl router or anything? Whilst to be honest I'm a little grey as to how iptables is meant to be handling new tcp connections in general, if you don't want to use ssh, just turn off the service.

This is a PC connected to a broadband cable that runs through a router that also has a wireless function. I don't know whether or not I want to use ssh because I don't understand exactly what it does, nor do I know how to turn it off. I think that I am in so far over my head that I should probably just leave things as they are and hope for the best!

Thanks, zoey

Turn off SSH.... System, Administration, Services, unlock, untick Remote Shell Services. SSH is a way to log into the box and get a terminal on it from a remote machine. Like remote desktop on windows, but command line only.

Thank You Very Much,

zoey