|
Author: Vins
Date: 10-05-02 07:06
Hi Guys,
Am having big problems with my computer in general
when it comes to security.
First I had Zone Alarm Pro 3, and after testing it from
many places on the internet I found out that the tcp & udp
ports 445,135,68, 1024 were open(LISTENING).
Then I install Tiny Personal Firewall 3 and Blocked all
the pre-made rules but still those ports were open. Am
using Windows 2000 professional and TPF mentions that
the applications SYSTEM, SVCHOST.EXE are using it.
How do you BLOCK thos ports?
Please help me out guys and is there a guide to set up
TPF 3. The rules are really hard to figure out.
Thanks.
Vins
|
|
Reply To This Message
|
|
Author: Bayou-Ru|er
Date: 10-26-02 06:29
Well first of all you should know what services run onj those ports:
Port 135 loc-srv/epmap
Microsoft DCE Locator service aka. end-point mapper. It works like Sun RPC portmapper, except that end-points can also be named pipes. Microsoft relies upon DCE RPC to remotely manage services. Some services that use port 135 of end-point mapping are:
DHCP server
DNS server
WINS server
Port 445 SMB
In Windows 2000, Microsoft has created a new transport for SMB over TCP and UDP on port 445. This replaces the older implementation that was over ports 137, 138, 139
Port 68 bootpd/dhcp
This protocol is used by systems to automaticaly configure systems. In the older days of the Internet, all systems were configured manually. BOOTP was developed to allow agents to be automatically configured. DHCP was a second version of BOOTP that made it easier to configure PCs this way.
As for Port 1024 You may have NetSpy thats usualy a reserved port.
Go to this website and run some free scans against your system.
http://www.securityspace.com/sspace/index.html
|
|
Reply To This Message
|
|
