Firewall Wizards mailing list archives

Re: firewalls


From: Jeffery.Gieser () minnesotamutual com
Date: Thu, 24 Aug 2000 14:46:37 -0500


Mike,

#What ports numbers/protocols should be blocked for rpc and NetBios on NT ?

Here are the RPC ports.

sunrpc            111/tcp    # portmapper, rpcbind
sunrpc            111/udp    # portmapper, rpcbind


Here are the ports used by Windows NT.

Windows NT V4.0

Browsing  UDP:137,138
DHCP Lease     UDP:67,68
DHCP Manager   UDP:135
Directory Replication:   UDP:138 TCP:139
DNS Administration  TCP:139
DNS Resolution UDP:53
Event Viewer        TCP:139
Logon Sequence UDP:137,138 TCP:139
Netlogin       UDP:138
Pass Through Violation   UDP:138
Performance Monitor TCP:139
PPTP           TCP:1723 IP Protocol:47
Printing            UDP:137,138 TCP:139
Registry Editor          TCP:139
Server Manager TCP:139
Trusts              UDP:137,138 TCP:139
User Manager        TCP:139
WinNT Diagnostics   TCP:139
WinNT Secure Channel     UDP:137,138 TCP:139
WINS Replication    TCP:42
WINS Manager        TCP:135
WINS Registration   TCP:137

Regards,
Jeffery Gieser


_______________________________________________
Firewall-wizards mailing list
Firewall-wizards () nfr net
http://www.nfr.net/mailman/listinfo/firewall-wizards


Current thread: