How to stop Win 2000 Pro from listening?

R

Roger Wilson

I'm new to 2k from 95 and I'm trying to figure out how to stop 2k from
listening on ports 135, 445, and 1025-1027. I'm using it as a standalone
workstation and have no current interest in making any network connections
other than dialing my ISP.

I tried commenting out 135 and 445 in the services file as I had done
successfully previously with 95, but it hasn't worked in 2k.

Any idea how to do this?

Thanks in advance for your help.

Roger
 
B

Bruce Chambers

Roger said:
I'm new to 2k from 95 and I'm trying to figure out how to stop 2k
from
listening on ports 135, 445, and 1025-1027. I'm using it as a
standalone workstation and have no current interest in making any
network connections other than dialing my ISP.

I tried commenting out 135 and 445 in the services file as I had
done
successfully previously with 95, but it hasn't worked in 2k.

Any idea how to do this?

Thanks in advance for your help.

Roger


Follow the instructions provided by the maker of whatever specific
firewall application you have installed.


--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH
 
D

Dan Seur

To add to Bruce's good advice, you can, once you've tuned
your firewall, go to www.grc.com, get a reading of ALL your
ports' statuses, and make the rest of them (or those you
choose) stealthy - unresponsive to web probe-bots. Quick
& easy.
 
R

Roger Wilson

To add to Bruce's good advice, you can, once you've tuned
your firewall, go to www.grc.com, get a reading of ALL your
ports' statuses, and make the rest of them (or those you
choose) stealthy - unresponsive to web probe-bots. Quick
& easy.

Thanks for the responses!

So are you saying there is no way to turn off 2k listening even prior to
creating a dialup connection and prior to installing a firewall, or that
you haven't tried it/don't know? Like I said, I was able to do that in 95,
but I know 2k is different I just don't know yet how much.

Roger
 
D

Dan Seur

There may be some way of reversing W2k's default listening,
from within the system itself. I never bothered to get into
it. Just used the grc.com online facility, and laid in a
firewall etc. There are a couple of interesting essays at
that site as well, in re this and other W2k security issues.
 
B

Bruce Chambers

Roger said:
So are you saying there is no way to turn off 2k listening even
prior
to creating a dialup connection and prior to installing a firewall,
or that you haven't tried it/don't know? Like I said, I was able to
do that in 95, but I know 2k is different I just don't know yet how
much.

Roger


There may well be a way of manually turning off Win2K's IP ports
one-by-one, but, as there are over 65,000 of them, the use of a
firewall is a much simpler way to secure a machine that connects to
the Internet.

--

Bruce Chambers

Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having
both at once. - RAH
 
D

Dave Patrick

Port filtering in Windows 2000 is done in Control
Panel|Network|"connection"|Properties|Tcp/Ip|Properties|Advanced|Options|Tcp/Ip
filtering|Properties


--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| I'm new to 2k from 95 and I'm trying to figure out how to stop 2k from
| listening on ports 135, 445, and 1025-1027. I'm using it as a standalone
| workstation and have no current interest in making any network connections
| other than dialing my ISP.
|
| I tried commenting out 135 and 445 in the services file as I had done
| successfully previously with 95, but it hasn't worked in 2k.
|
| Any idea how to do this?
|
| Thanks in advance for your help.
|
| Roger
 
G

Guest

Hy Roger

Go into Network Properties, go into Internet Protocoll properties, go into
advanced/ select Options Tab, select TCP/IP Filtering Properties.

Uff Here you can allow or disallow TCP/UDP/IP Protocols...

But i always advice a freeware tool like zonealarm (for private use). It's
more comfortable!


Good Luck, Cheers Marcel
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top