Re: WIN2000NT False prophets(!).

From: Martin Spencer-Ford (tpwuk.dash.zero.one_at_ntlworld.com)
Date: 11/20/05 

Date: Sun, 20 Nov 2005 00:50:09 GMT

<snip>
>
> | I swing both ways on the argument to disable the service or not. On LAN
> | it does indeed have its uses, but on the Internet side, i see little to
> | no functionality for it to be there, so MS's new attitude towards this
> | service is for me, the better one.
> |
> | Many thanks Bruce for making this thread a pleasure...
> |
> | Martin
> | (TpwUK)
>
> All that the NT Messenger Service does is allow the receipt of NetBIOS Pop-Ups/messages. It
> has deopendencies on the RPC and Workstation Services. If you shutdown the Messenger
> Service it will have no effect on TCP port 135 and any exploitations of RPC/RPCSS DCOM. It
> will only disable the receipt of NetBIOS messages.
>

Hello again David, good ol' NetBIOS, 135,139,445 ahhhh now it starts to
make sense - Just like nobbling file and printer sharing from not only
DUN, but also from network connections that face the outside world,
doesn't prevent these ports from being active, you have to disable the
NetBIOS over TCP helper service too to effectively kill the messenger
service ? and then would not this frustrate RPC .... hmmm what a tricky
web we weave.

Martin
(TpwUK)

Relevant Pages

  • Re: WIN2000NT False prophets(!).
    ... | Hello again David, good ol' NetBIOS, 135,139,445 ahhhh now it starts to ... | make sense - Just like nobbling file and printer sharing from not only ... | NetBIOS over TCP helper service too to effectively kill the messenger ...
    (microsoft.public.security.virus)
  • Re: Win2k unable to map Samba
    ... When NetBIOS over TCP/IP is disabled on W2k and later clients, ... TCP port 139, and TCP port 445. ...
    (microsoft.public.win2000.networking)