How to Stop ICMP Ping on Windows XP

The Internet Control Message Protocol (ICMP) is a networking protocol used by computers to send status messages to each other. ICMP's most well-known application is the ping utility, which is used to see if computers are active on a network. Ping sends a message, called an echo request, to the target PC, and if the PC is operational on the network it responds to the ping. This utility is useful for administrators and technical support analysts, but it can also be used by hackers to find exposed PCs on the Internet. Hackers will send ping requests to large blocks of Internet addresses until they receive a response, and will then attempt to hack into that computer. By setting your Windows XP PC to ignore ping requests, you can make your computer invisible to hackers.

Things You'll Need

• Microsoft Service Pack 2 or greater
• Administrator rights on your PC

Instructions

1. Determine if you have Service Pack 2 or greater installed. Right click on "My Computer" (located on your Desktop or in the Start Menu) and select "Properties" from the menu. Under the "System" heading, you will see information about your version of Windows. If you see a line stating "Service Pack 2" or "Service Pack 3," you can continue to Step 2. If not, either download and install the latest service pack from Microsoft's website or jump to Step Four for alternate solutions.

2. Open the Start Menu and select "Control Panel" and then open "Windows Firewall." If you do not see "Windows Firewall," click on "Security Center" and then "Windows Firewall." If the firewall is turned off, select the "On" setting. You will need administrator rights on your PC to change any firewall settings.

3. Once the firewall is turned on, click the "Advanced" tab in the firewall settings dialog box. Click the "Settings" button for the "ICMP" section. Uncheck the box titled "Allow incoming echo request" and click "OK". This will stop your PC from answering remote ping requests. If the box is already unchecked, you are already blocking ICMP traffic. If you have Microsoft File and Print Sharing enabled on your PC, you will be unable to uncheck this box. Continue to the Step Four for alternate solutions.

4. As an alternative to using the Windows Firewall (if you have File and Print Sharing enabled or if you do not have the most current Service Pack installed), you can use third party Internet security software to block ping requests. Many antivirus software suites also contain Internet firewalls. Typically, these firewalls will block all unsolicited incoming traffic by default, including ping requests. Check your particular software package's instructions to see how to configure the firewall to disable ICMP.

5. If you use a router to connect to the Internet, you may be able to set the router to block ICMP traffic. Some router manufacturers, such as Belkin, make this as easy as checking an option titled "Block ICMP requests," while others require you to do advanced network configuration. Contact your router manufacturer for details on how to use your router to block ICMP.

Tips & Warnings

• If you are uncomfortable changing your computer settings, contact tech support for your particular software package or router. They can often send you a detailed walk-through specific to your setup.

• Changing firewall and router settings can impact your network traffic, sometimes completely blocking you from accessing the Internet. Use caution when changing settings and write down the original settings so you can revert to them later if needed.

References

• Blocking PING Response in Windows to Prevent Hackers from Finding You
• Windows Firewall Overview

Resources

• Microsoft.com
• Online ping utility to test if your PC is blocking ICMP