Re: Ports 135 & 445

From: \ (dvader_at_deathstar.mil)
Date: 10/22/04 

Date: Fri, 22 Oct 2004 10:16:59 -0400

>When I do a netstat -an these ports are always listening, I have a firewall
>blocking all lower ports but I was wondering how I could close them all
>together, or what programmes are using these ports?

Port 445 is the "messenger" service in NT, W2K and XP. It is not needed and is
pretty easy to disable without any ill effects. Port 135 is RPC/DCOM and is
harder to disable. Depending on what services you have running, you may not be
able to close it.

Gibson Research has a couple of free utilities to safely disable these services.
http://www.grc.com/dcom/ (135)
http://www.grc.com/stm/shootthemessenger.htm (445)

Or you can disable them yourself by changing the appropriate settings in
"Services." 

-- 
Dave "Crash" Dummy - A weapon of mass destruction
crash@gpick.com?subject=Techtalk (Do not alter!)
http://lists.gpick.com

Relevant Pages

  • [Full-disclosure] Re: Quarantine your infected users spreading malware
    ... On Monday 20 February 2006 22:40, Gadi Evron wrote: ... "don't be the Internet's Firewall") are blocking ... ports such as 139 and 445 for a long time now, ...
    (Full-Disclosure)
  • Re: Firewalls and ephemeral ports
    ... > firewall is seeing ACK's coming back toward us with the same destination ... > address, but different sending port numbers, and is blocking them. ... UDP or TCP? ... >> ephemeral ports. ...
    (microsoft.public.win32.programmer.networks)
  • Re: Blocking IP addresses?
    ... Go to Advanced|Filters in the Linksys BEFSR41. ... > specified range of ports. ... >> If you want to do IP blocking, you need a firewall in addition ... >>to the router's firewall. ...
    (comp.security.firewalls)
  • Re: Being Hacked - How can I determine who and how?
    ... > Alessandro.....Thank you for your prompt response. ... > firewall, but at this point I'm not blocking any ports ... but if you are not blocking any ports then you ...
    (microsoft.public.security)
  • Re: Being Hacked - How can I determine who and how?
    ... > Alessandro.....Thank you for your prompt response. ... > firewall, but at this point I'm not blocking any ports ... but if you are not blocking any ports then you ...
    (microsoft.public.win2000.security)
Loading