Re: Do I need these services listening?

From: Jason Edwards (none1_at_invalid.invalid)
Date: 03/15/05 

Date: Tue, 15 Mar 2005 13:57:11 -0000

<rodlinkowitz@whale-mail.com> wrote in message
news:1110889621.943552.287000@g14g2000cwa.googlegroups.com...
>
> Gerald Vogt wrote:
> > rodlinkowitz@whale-mail.com wrote:
[cut]

>
> I'm convinced there is no one running a mail server on my system.

That is likely to be true but it does depend on what is meant by a mail
server.
It is also likely to be true that you have done (or had done for you by
whoever supplied your PCs) a complete install of the first release of XP pro
with all Windows components including IIS installed.
This is why your PC is listening to 25 and 110. If you don't need IIS go to
the control panel, add/remove programs, add/remove windows components, and
remove IIS.

> But
> the thing I'm not sure about is why, when I turned off ALL of my
> firewalls on both computers, including
> the SP1 on the router (and even opened up the feature in the router's
> setup to alllow "pings"), I still got a solid wall of green (stealth)
> blocks at GRC's SheildsUp.

It's because the router, like any NAT router, does not know which PC on your
LAN the incoming connection requests from shields up should go to. So your
router is ignoring them and sending nothing back. Shields up will show the
port as stealth if it gets nothing back.

> Those include
> the 25,110,445,135-139 ports btw, that were supposed to be "listening".

They are only listening to your LAN if your ADSL modem is connected to the
WAN port on the Netgear rp614 router and both computers are connected to LAN
ports on the Netgear rp614 router.

> My only guess is the router's NAT feature, which can't be turned off,
> is acting like a full on firewall.

Nope it's acting like a NAT router would be expected to act, not like a real
firewall at all.

If you tell the router to block outbound connections to 25 and 110 then you
will block yourself from being able to use your ISP's email services. In
this case the listening computer is at your ISP not on your LAN.
This has nothing to do with blocking services on your own LAN which are
listening to 25/110 but which shouldn't have been installed in the first
place.
I suggest you have a look at TCPView
http://www.sysinternals.com/ntw2k/source/tcpview.shtml
Tell it not to resolve addresses and to be always on top.
Run it on both of your PCs
Look for 25 and 110 in the local address column.
Now send and receive email to/from your ISP.
Look for 25 and 110 in the remote address column.
If you can figure out what this is telling you then you may get a bit
further with your education.

Jason

[cut]

Relevant Pages

  • Re: Loss of Connectivity on Only One PC on a LAN
    ... When you ran the Network Setup Wizard, ... The original setup of the LAN was done entirely by the user of the other PC on that LAN in July. ... I use a LAN connection which consists of two PCs each connected to a Linksys BEFSR 41 Router. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Sharing WLAN internet connection for LAN - please advise
    ... >What is the best way to share WLAN internet connection for small LAN ... to add a router with NAT. ...
    (alt.internet.wireless)
  • Re: Loss of Connectivity on Only One PC on a LAN
    ... I use a LAN connection which consists of two PCs each connected to a Linksys BEFSR 41 Router. ... IntelPRO/1000 MT Network Connection - ...
    (microsoft.public.windowsxp.network_web)
  • Re: Constantly Acquiring Network Address
    ... the both computers should connect to the router and router conenct ... Right now the only physical connections are dsl line to Westell ... to the dsl and another connecting to the lan, do you have DHCP in the LAN? ... > or both it doesn't matter, I do not get a lan connection. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Possible to secure WEP?
    ... It doesn't have to be a "server". ... this IP cannot be in the same class C IP block as your own LAN. ... To keep it simple, my gateway router, ... Ethernet adapter Local Area Connection: ...
    (alt.internet.wireless)