[SATLUG] Why are my ports 135,139,and 445 open?

Daniel J. Givens daniel at rugmonster.org
Fri Dec 25 21:30:53 CST 2009


That's your ISP filtering Netbios and SMB. There have been a number of  
worms and botnets that targetted vulnerabilities in those services on  
Windows boxes. They are blocking inbound connections to those ports to  
protect their network.

--
Daniel J. Givens

On Dec 25, 2009, at 8:30 PM, Don Davis <dondavis at reglue.org> wrote:

> When I scan my laptop from outside I see:
> 135/tcp filtered msrpc
> 136/tcp filtered profile
> 137/tcp filtered netbios-ns
> 138/tcp filtered netbios-dgm
> 139/tcp filtered netbios-ssn
> 445/tcp filtered microsoft-ds
>
> However, netstat -patu does not show these ports listening.
> I have also tried various variations on iptables rules with no  
> success:
> iptables -A INPUT -p udp --sport 445 -j REJECT
> iptables -A INPUT -p udp --dport 445 -j REJECT
>
> On the laptop and on the router with OpenWRT with no success.  
> Thoughts?
> -- 
> _______________________________________________
> SATLUG mailing list
> SATLUG at satlug.org
> http://alamo.satlug.org/mailman/listinfo/satlug to manage/unsubscribe
> Powered by Rackspace (www.rackspace.com)


More information about the SATLUG mailing list