going stealth from behind a router

up until now I have used a usb ADSL modem and kerio firewall to go online with my laptop and windows XP, I routinely check sheilds up at grc.com and always get a stealth (invisible) rating which keeps me happy and reasonably safe.

that was until I bought a wireless adsl modem/router (Aceex AWR51/2) to let my kids go online too.

now all my ports are closed (but visible) except telnet and http which are still open.

how can I get back to stealth status here guys,
Im not happy about doing it myself, but Im terrified about my kids being online in an unprotected pc

 

Kerio on both/all PCs and close down any ports you don't want/need. Stealth is interesting but firewalled ports and current AV software is safe.

You'll need ports 80 (for HTTP/browser) and ports 25/110 (email in/out) open but most of the Kerio I know of is statefull which means that even the 'open' ports aren't really since the firewall examines traffic thru those ports to make sure it is appropriate to the sort of traffic expected and warns you if something strange is trying to sneak in.

You may well need other ports if you do games or other things that need additional ports but should still be safe (or as safe as one can be on the internet these days). Granted, not 100% safe but no one is and you'll be in the position of a person who locks a car on a street where most don't and some even leave keys in the car - too many easier targets.

Current AV protection should take care of any nastys trying to get to you via browser or email.