Its a shame I never got a response to this question. I'm sure a
number people want to do the same thing. I'm repeatly getting hit by
scans on the epmap(135) and microsoft-ds(445) ports. So the crackers
must have found a hole in these services. I was able to track down
what made 1900 and 5000 listen. They were related to either Telephony
and or NLA because as soon as I stopped each service the port stopped
listening. After further investigation I've read that MS tied the
Epmap service into so many other things the OS can't operate with it.
That's bad news. That leaves 445 which is the replacement for 137,
138, and 139 or SMB services. This should be one service I should be
able to turn off but from where? Much help is needed.
