Re: RPC and SMB security issue at public network



?? wrote:

RPC's port is fixed to 135, there's no way to change it to 123
SMB's port is fixed to 445, there's no way to change it to 13
when RPC or SMB becomes dangerous, virus and hackers can easily
take control over my computer

Disable the IPC$ share by doing the following:

---------
Remove IPC$ Share Remote Netbios Attack Vulnerability

1. Open Regedit
2. HKEY_LOCAL_MACHINE -> System -> CurrentControlSet -> Control ->
Lsa -> restrictanonymous
3. Change "Value Data" from 0 to 1
4. This will disable remote logon to a null IPC$ share
---------
.