Results 1 to 8 of 8

Thread: Ports = Open

  1. #1
    Senior Member
    Join Date
    Apr 2003
    Posts
    125

    Ports = Open

    I scanned my system with M A B Internet tools. It told me that I have port 25, 110, 135 open.
    I understand that ports represent logical connections such as applications that use the Internet. My question is what are these specific ports used for? How would I close them?

  2. #2
    25 is simple mail transfer, 110 is pop (post office protocol), and 135 is DCE endpoint resolution. All of these have to do with email, so either you have a virus that is keeping the ports open, or a program (such as outlook or something) is using these ports. I have attached a list of a lot of known ports for you to go over and see if you have anything else you might need to close.

  3. #3
    Junior Member
    Join Date
    Apr 2003
    Posts
    7
    Yesterday, Framework posted a response to Ritesh Gaur's question about ports and gave a really smooth site for these things.

    http://www.iana.org/assignments/port-numbers

    It gives all the names of the ports and what programs are associated with them. As far as closing them, I am uncertain. However, I believe if you're using XP you can close ports with the security manager or the components manager.

  4. #4
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,785
    a virus might show port 25 open while its sending itself out if it used its own smtp engine but ive never heard of one set up to receive mail. mail clients use the first available port over 1024. 110 only appears at the server. your running a mail server. maybe you downloaded one at one time and forgot about it?
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  5. #5
    The Doctor Und3ertak3r's Avatar
    Join Date
    Apr 2002
    Posts
    2,744
    Jimminy Pete,

    Jehnny's D/L and the link from Memory are the same file..

    Good call though..

    Cheers
    "Consumer technology now exceeds the average persons ability to comprehend how to use it..give up hope of them being able to understand how it works." - Me http://www.cybercrypt.co.nr

  6. #6
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,885
    25 is simple mail transfer, 110 is pop (post office protocol), and 135 is DCE endpoint resolution. All of these have to do with email,
    Actually, RPC is used for e-mail in MS Exchange environments only but it also has a much more common use. The RPC Endpoint Mapper process is responsible for maintaining the connection information for all of the processes on that machine using RPC. The Endpoint Mapper process runs within the RPC service itself which provides inter-process communication mechanism that allows a program running on one computer to seamlessly execute code on a remote system.

    I just wanted to add this to compliment Jehnny's post so there is no confusion that the RPC protocol is not exclusive to e-mail alone.
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  7. #7
    Senior Member
    Join Date
    Apr 2003
    Posts
    125
    So what your saying is that if I only use attbi and never microsoft outlook as my email client than its ok to remove it? And anyother email clients that I may have d/l and forgot abo

    Update:
    Port Scanner by M A B also says that these ports are open too:

    [Connected] Port 389
    [Connected] Port 445
    [Connected] Port 1002
    [Connected] Port 1025

  8. #8
    Senior Member
    Join Date
    May 2003
    Posts
    115
    you might want to try a program like fport by foundstone or tcpview to see what proc this ports are using and use something like mbsa to find out how to close them. it's important for you to find out why they're open in the first place.

    -w0rm3y

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •