netbios

I ran a scan against one of my win2k boxes here at work and it comes up with a port 139 which is the netbios on tcp. Now when i try to connect via net use \\xxx.xxx.xxx.xxx\ipc$ it tells me my box isnt found? I have a firewall so i assume my box is safe from netbios attacks. i assume right>?

Quote:

---

Originally posted here by cerealbowl
I ran a scan against one of my win2k boxes here at work and it comes up with a port 139 which is the netbios on tcp. Now when i try to connect via net use \\xxx.xxx.xxx.xxx\ipc$ it tells me my box isnt found? I have a firewall so i assume my box is safe from netbios attacks. i assume right>?

---

Hrrrm,
If you have a firewall working, a port scan shouldn't find port 139. Were you scanning the win2k box from another computer-- or from the same computer?

A portscan on localhost [127.0.0.1] will always reveal open ports since a firewall doesnt block ports, but close them.... And your computer is almost always set as a trusted zone (usually under 0.0.0.0)

remote scan from my home to work box. fire wall inbetween.

Your Firewall should stealth all your ports when scanned remotely (with the possible exception of 80)



Disabling Services

Disabling NetBIOS
http://support.microsoft.com/default...EN-US;q137368&
http://support.microsoft.com/default...EN-US;q313314&
http://www.jsifaq.com/SUBL/tip5500/rh5558.htm