Thank you, you were right, it was the router. It's a Draytek 2600 I'm using, I couldn't work out how to disable ports in the web interface but I went the whole nine yards and reset the router and reconfigured my connection. Went back to grc.com to do the scan and the result was all stealth...