Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Penetration Testing: Re: [PEN-TEST] Closing Port 139

Re: [PEN-TEST] Closing Port 139

From: Frank Dimina <fdimina_at_RIPTECH.COM>
Date: Thu, 12 Oct 2000 15:14:26 -0400

Another question on this subject, is the NT TCP/IP filtering stateful or
does it just filter all packets on a port? (I am talking about the OS
filtering, not the proxy server feature)?

-----Original Message-----
From: Anderson, Harry F. [mailto:HFANDERS_at_OPM.GOV]
Sent: Thursday, October 12, 2000 1:47 PM
To: PEN-TEST_at_SECURITYFOCUS.COM
Subject: Re: [PEN-TEST] Closing Port 139

     How well does this work on just NT? I have been told that the NT
packet filtering does not work consistantly with all ports. I have wanted
to test it but there is just not enought time in the day.

  - Harry Anderson

        -----Original Message-----
From: Ansar Mohammed [SMTP:amohammed_at_CARIB-LINK.NET]
Sent: Thursday, October 12, 2000 11:53 AM
To: PEN-TEST_at_SECURITYFOCUS.COM
Subject: Re: [PEN-TEST] Closing Port 139

        Both Microsoft Windows NT and Proxy Server provide packet filtering
at the
NIC level.

        It can be accessed from the Security Tab of the Proxy Server
properties and
the network applet of control panel.

> -----Original Message-----
> From: Penetration Testers [ mailto:PEN-TEST_at_SECURITYFOCUS.COM
<mailto:PEN-TEST_at_SECURITYFOCUS.COM> ]On Behalf
> Of Kasey Speakman
> Sent: Thursday, October 12, 2000 9:54 AM
> To: PEN-TEST_at_SECURITYFOCUS.COM
> Subject: [PEN-TEST] Closing Port 139
>
>
> How do I close this port? The situation is that we are using
> an NT Server
> machine with MS Proxy Server. There are no shares on this
> computer. The
> computer has 2 nics. One goes to the LAN, and the other goes
> to our router.
> I have the internet nic unbound from the WINS on both the
> server and the
> workstation services, but the other card is bound to the WINS on both
> services. Auditing tools still show that the port is open,
> even though it
> won't give anyone any connections, but I don't want any
> attention being
> drawn to it by that port being open at all. Help will be appreciated!
>
> Thanks,
>
> Kasey

        -------------------------------
-- Even though this E-Mail has been scanned and found clean of
-- known viruses, OPM can not guarantee this message is virus free.
-------------------------------
-- This message was automatically generated.
-------------------------------
Received on Oct 13 2000

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos