Security Basics mailing list archives

Re: Windows 2000 server ports, services to close.


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 14 Oct 2004 20:02:23 +0200

On 2004-10-13 Don Parker wrote:
Please be aware that you don't actually close off ports unless by that
you mean you simply firewall them off. Lastly you can disable the
NetBIOS services but you *cannot* disable DCE on port 135 as you will
be disabling RPC and your computer needs RPC to run.

Not true. While you cannot completely disable RPC without serious
side-effects it is definitely possible to prevent the portmapper from
listening on port 135/tcp. BTDT.

http://www.ntsvcfg.de/ntsvcfg_eng.html

Please note that the script is intended to be used with workstation
versions, not server versions. If you want to run it on a server, you
will have to edit it to fit your needs.

Regards
Ansgar Wiechers
-- 
"Those who would give up liberty for a little temporary safety
deserve neither liberty nor safety, and will lose both."
--Benjamin Franklin


Current thread: