amerar@iwc.net
09-25-2006, 08:05 PM
Hi All,
At my other job, the ISP was complainint ab out one of our boxes doing
acans on ports 139, 137, 145 or something like that. The box is
running Windows 2000.
At any rate, we found some info on this site and followed the
instructions to close the ports:
http://www.petri.co.il/what's_port_445_in_w2k_xp_2003.htm
Now, we cannot access the internet at all!!! Can someone help?
Should we reverse what we did, or did we do the wrong thing??
I've never seen this with Windows 2000, and this is a fresh
install........
Thanks!
f/fgeorge
09-25-2006, 10:54 PM
On 25 Sep 2006 12:05:06 -0700, amerar@iwc.net wrote:
>Hi All,
>
>At my other job, the ISP was complainint ab out one of our boxes doing
>acans on ports 139, 137, 145 or something like that. The box is
>running Windows 2000.
>
>At any rate, we found some info on this site and followed the
>instructions to close the ports:
>http://www.petri.co.il/what's_port_445_in_w2k_xp_2003.htm
>
>Now, we cannot access the internet at all!!! Can someone help?
>Should we reverse what we did, or did we do the wrong thing??
>
>I've never seen this with Windows 2000, and this is a fresh
>install........
>
>
>Thanks!
Open the ports, one at a time, testing to see which one opens the net.
Then leave it alone and see if that is okay for awhile. Just closing
ports without having a reason is like drinking with someone elses
straw, dangerous!
There shouldn't be any need to have those ports open to the Internet. Port
137 is the netbios name service. 139 is netbios session service, and 145 is
the "UAAC protocol", which I can find no information on whatsoever except
that it was used as a backdoor in a UNIX telnet virus. Blocking these ports
should not prevent you from getting to the Internet. In fact blocking these
ports on a public Interface is a good idea. I'd re-check your firewall
configuration.
....kurt
<amerar@iwc.net> wrote in message
news:1159211105.980585.53260@i42g2000cwa.googlegroups.com...
> Hi All,
>
> At my other job, the ISP was complainint ab out one of our boxes doing
> acans on ports 139, 137, 145 or something like that. The box is
> running Windows 2000.
>
> At any rate, we found some info on this site and followed the
> instructions to close the ports:
> http://www.petri.co.il/what's_port_445_in_w2k_xp_2003.htm
>
> Now, we cannot access the internet at all!!! Can someone help?
> Should we reverse what we did, or did we do the wrong thing??
>
> I've never seen this with Windows 2000, and this is a fresh
> install........
>
>
> Thanks!
>