Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

closing ports 135 (msrpc) & 139 (netbios-ssn)

Posted on 2004-10-02
Last Modified: 2013-12-04
According to nmap, the following ports are open on my computer:

135/tcp  open     msrpc
139/tcp  open     netbios-ssn

My understanding is the msrpc is the server that formerly was vulnerable to the msblast worm, so I'd like to disable it. I probalby don't need it open, right? How can this be done?

Also, is there a reason not to disable the netbios-ssn process? If so, how can I stop the process from running?

Question by:bobwood2000
  • 3
  • 2

Expert Comment

ID: 12210155
You can prevent these ports from being exploited by simply running a firewall such as Zone Alarm (http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp).  They will block any TCP port 135/139 traffic.  

Author Comment

ID: 12210681
I don't want to use a firewall.

Expert Comment

ID: 12213417
Try disabling the file & Printer sharing
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.


Author Comment

ID: 12214979
I disabled file & printer sharing, but the ports remain open.

Accepted Solution

dev8 earned 250 total points
ID: 12217378

Author Comment

ID: 12218064
Thank you.

Featured Post

Networking for the Cloud Era

Join Microsoft and Riverbed for a discussion and demonstration of enhancements to SteelConnect:
-One-click orchestration and cloud connectivity in Azure environments
-Tight integration of SD-WAN and WAN optimization capabilities
-Scalability and resiliency equal to a data center

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Probleme new certificat SHA256 6 60
Ransome Ware Question 10 159
Accessing SQL Server Instance from outside the network 29 140
Securing a laptop that travels frequently 21 114
Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question