How do I?

General Network security, firewalls, port filtering/forwarding, wireless security, anti-spyware, as well as spam control and privacy discussions.
Post Reply
User avatar
robbeing
Member
Posts: 34
Joined: Tue Oct 17, 2000 12:00 am
Location: USA

How do I?

Post by robbeing »

How DOES one block ports 137, 138, and 139?? I tried in ZAP using the port blocking settings, and yet it still shows as open! I am also using a befsr41 Linksys router (which is listed inZAP as a "trusted" internet site.) I didn't set ZAP up using the security tab in Linksys, because many of my friends said it wasn't necessary.
So, is it? Can anyone help?
ROBBIE
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

User avatar
robbeing
Member
Posts: 34
Joined: Tue Oct 17, 2000 12:00 am
Location: USA

Confusing

Post by robbeing »

The grc.com site doesn't address WinXP and how to accomplish this (port blocking) It does for Win 98 & Win NT But, when I probed & scanned my ports on this site (also did this at dslreports.com) it showed STEALTH on all my ports! Only at Speedguide.net did my 137,138,& 139 ports appear to be open.
Confusing! Why would these ports appear to be closed on these two other sites and not at speedguide?
ROBBIE
User avatar
TonyT
SG VIP
Posts: 10356
Joined: Fri Jan 28, 2000 12:00 am
Location: Fairfax, VA

Post by TonyT »

"Disable NetBios over TCP/IP".

Click "Network and Dial-Up connections" in the Control Panel.

Select Local Area Connection

Click Advanced Menu

Select Advanced Settings

Uncheck TCP\IP (Internet protocol) that is located underneath both File & Print Sharing and Client for Microsoft Networks.
No one has any right to force data on you
and command you to believe it or else.
If it is not true for you, it isn't true.

LRH
User avatar
robbeing
Member
Posts: 34
Joined: Tue Oct 17, 2000 12:00 am
Location: USA

Just Checking

Post by robbeing »

In the properties of TCP/IP, there is an advanced tab (the only place I found one)It takes you to advanced TCP/IP settings. There are four tabs-- IP settings, DNS, WINS,and OPTIONS
In the WINS tab, I find the default setting;use netbios setting from the dhcp server. If static IP is used or DHCP does not provide netbios, enable netbios over TCP/IP
2 is; Enable netbios over TCP/IP
3 is; Disable netbios over TCP/IP
Mabey I can see disable netbios over TCP/IP, but, If I uncheck TCP/IP in the Local Area Network Properties, how then would I get on the internet? Do you mean that I should disable Netbios over TCP/IP? I mean, you Need TCP/IP don't you? The ports I'm having problems with are Netbios ports. Besides, There was no advance tab in local area connections, I only got to that tab by going to the properties of TCP/IP I'm confused with those instructions. Mabey I didn't go to the right place. This was easy in Win 98! This is XP, and all together different
ROBBIE
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Re: Just Checking

Post by YeOldeStonecat »

Originally posted by robbeing
Mabey I can see disable netbios over TCP/IP, but, If I uncheck TCP/IP in the Local Area Network Properties, how then would I get on the internet? Do you mean that I should disable Netbios over TCP/IP? I mean, you Need TCP/IP don't you? The ports I'm having problems with are Netbios ports. Besides, There was no advance tab in local area connections, I only got to that tab by going to the properties of TCP/IP I'm confused with those instructions. Mabey I didn't go to the right place. This was easy in Win 98! This is XP, and all together different


If you right click network places, select properties, you'll see your network connections. If you click the connection we're talking about (usually Local Area Connection)...whichever one is your LAN, to highlight it...then look up above in your dropdown menu, you'll see "advanced", then "advanced settings". Tony is talking about bindings here.....under advanced settings. Bindings just removes networking services from TCP if you choose so, TCP will still load.
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
robbeing
Member
Posts: 34
Joined: Tue Oct 17, 2000 12:00 am
Location: USA

seeing different views?

Post by robbeing »

I wish there was a way to upload a snapshot of what I get whenI select local area connections, but alas I see no attachment button here so i'll try and give it step by step.
When I right click my network connections & select properties,it takes me to the local area connections (lan, or MY connection) when I click on THAT (local area connection (lan) It takes me to a Local Area Connections Status box with two buttons:Properties
& Disable. So I select Properties, which then takes me to Local Area Connections Proerties box which has Four items in it:
Client for Microsoft
Qos packet scheduler
File & Print Sharing
Internet Protocol (TCP/IP
So naturally I select TCP/IP and select the Proerties button because i've yet to see a advanced button. When I do this, it takes me to TCP/IP properties box THERE is an ADVANCE button (the first one I've run into)
I select ADVANCED, and IT takes me to "ADVANCED TCP/IP SETTINGS" in there, there is 4 tabs:IP----DNS-----WINS------and OPTIONS and only in the WINS tab do I see anything related to Netbios I'm running Windows XP PRO Your instructions are quite clear, but, I'm not getting a Drop down menu when I select my Lan connection I get what I listed above. Do you see why I'm a bit confused? After all, I don't want to do the wrong thing here, I want to be SURE I'm in the right place.Please be patient with me, I'm simply not getting the same menus that you have described here.
ROBBIE
User avatar
TonyT
SG VIP
Posts: 10356
Joined: Fri Jan 28, 2000 12:00 am
Location: Fairfax, VA

Post by TonyT »

You are not correctly following my instructions:

1. Rt click Network Plavces
2. Click Properties
3. Select Local Area Connection. (Select means click it ONE time only, clicking twicw will open the connection status window)
4. At TOP of the explorer window are menus. Click the Advanced Menu.
5. The click Advanced settings
6. In the window that opens, UNCHECK TCP\IP (Internet Protocol) underneath File & Print Sharing and under Client for Microsoft Networks.

You are NOT shuttin g down TCP\IP completely. You are unbinding TCP from ONLY those two things.

If you do not do this, then all I need is your IP address and I can access you computer anytime it's online!
No one has any right to force data on you
and command you to believe it or else.
If it is not true for you, it isn't true.

LRH
User avatar
robbeing
Member
Posts: 34
Joined: Tue Oct 17, 2000 12:00 am
Location: USA

FINALLY!

Post by robbeing »

Yes! I finally see the advanced tab! I was looking in the program confines. Well, after getting there I see that everything is unchecked! Through TCP/IP properties advanced, I unchecked client for Micrisoft, and selected to disable netbios over TCP/IP
I guess that did it. BUT! every other site I do a probe on (DSLREPORTS,& Gibson Research (grc.com)) report ALL my ports CLOSED. Stealth! But not at Speedguide.net Really, I don't get it!I can't figure that one out. How could two out of three sites find my set up healthy. I've taken your advice, and STILL, Speedguide sees these ports (137,138, & 139) as OPEN. Haah??
ROBBIE
User avatar
blebs
Posts: 12819
Joined: Sat Dec 02, 2000 12:00 am
Location: North Canton, Ohio

Post by blebs »

If GRC says there closed or stealthed, they are. I still think there are some bugs in the SG scanner.
User avatar
TonyT
SG VIP
Posts: 10356
Joined: Fri Jan 28, 2000 12:00 am
Location: Fairfax, VA

Post by TonyT »

Delete your TIFs and Cookies, return to SG, log on and try the port scan again.
No one has any right to force data on you
and command you to believe it or else.
If it is not true for you, it isn't true.

LRH
Post Reply