Penetration Testing: Re: [PEN-TEST] Closing Port 139

[Ansar Mohammed <amohammed () CARIB-LINK NET>]

Both Microsoft Windows NT and Proxy Server provide packet filtering at the
NIC level.

It can be accessed from the Security Tab of the Proxy Server properties and
the network applet of control panel.

> -----Original Message-----
> From: Penetration Testers [mailto:PEN-TEST () SECURITYFOCUS COM]On Behalf
> Of Kasey Speakman
> Sent: Thursday, October 12, 2000 9:54 AM
> To: PEN-TEST () SECURITYFOCUS COM
> Subject: [PEN-TEST] Closing Port 139
>
>
> How do I close this port?  The situation is that we are using
> an NT Server
> machine with MS Proxy Server.  There are no shares on this
> computer.  The
> computer has 2 nics.  One goes to the LAN, and the other goes
> to our router.
> I have the internet nic unbound from the WINS on both the
> server and the
> workstation services, but the other card is bound to the WINS on both
> services.  Auditing tools still show that the port is open,
> even though it
> won't give anyone any connections, but I don't want any
> attention being
> drawn to it by that port being open at all.  Help will be appreciated!
>
> Thanks,
>
> Kasey