Dear Experts,

Any clues to disable the following ports on Windows NT/2000 server and what
is the consequences if I disabled it ?
netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
(110/tcp), IMAP (143/tcp).

Thanks

On Mon, 18 Oct 2004 20:01:02 -0700, Calvin
wrote:

>Any clues to disable the following ports on Windows NT/2000 server and what
>is the consequences if I disabled it ?
>netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
>(110/tcp), IMAP (143/tcp).

You don't "disable" ports, they're either open or closed. And you
shouldn't close specific ports, only open those you need and close all
others by default. Best is in your firewall. Consequences are the
services that use those ports don't work.

Jeff

If you don't need those services, disable them by disabling the service, or
uninstalling the service [ add/remove programs - Windows Components for
Windows applications] or application. TCPView is a free tool from
SysInternals that can help show what executable is mapped to a port.

http://www.sysinternals.com/ntw2k/source/tcpview.shtml
http://www.microsoft.com/technet/security/tools/mbsahome.mspx -- running
MBSA may be helpful in questioning about services and explaining how to
disable.

The KB link below shows a list of ports used by Windows Server and what
application they are used for that can help you determine if those ports are
needed or not. Your firewall will block access to those ports from the
internet if configured properly. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;832017



"Calvin" wrote in message
news:7A5E7C02-54AB-4281-BF56-1ADA2EACC80C@microsoft.com...
> Dear Experts,
>
> Any clues to disable the following ports on Windows NT/2000 server and
> what
> is the consequences if I disabled it ?
> netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
> (110/tcp), IMAP (143/tcp).
>
> Thanks