Disable Ports on Windows NT/2000

[Calvin]

Archived from groups: microsoft.public.win2000.security (More info?)

Dear Experts,

Any clues to disable the following ports on Windows NT/2000 server and what
is the consequences if I disabled it ?
netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
(110/tcp), IMAP (143/tcp).

Thanks

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

On Mon, 18 Oct 2004 20:01:02 -0700, Calvin
<Calvin@discussions.microsoft.com> wrote:

>Any clues to disable the following ports on Windows NT/2000 server and what
>is the consequences if I disabled it ?
>netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
>(110/tcp), IMAP (143/tcp).

You don't "disable" ports, they're either open or closed. And you
shouldn't close specific ports, only open those you need and close all
others by default. Best is in your firewall. Consequences are the
services that use those ports don't work.

Jeff

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

If you don't need those services, disable them by disabling the service, or
uninstalling the service [ add/remove programs - Windows Components for
Windows applications] or application. TCPView is a free tool from
SysInternals that can help show what executable is mapped to a port.

http://www.sysinternals.com/ntw2k/source/tcpview.shtml
http://www.microsoft.com/technet/security/tools/mbsahome.mspx -- running
MBSA may be helpful in questioning about services and explaining how to
disable.

The KB link below shows a list of ports used by Windows Server and what
application they are used for that can help you determine if those ports are
needed or not. Your firewall will block access to those ports from the
internet if configured properly. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;832017



"Calvin" <Calvin@discussions.microsoft.com> wrote in message
news:7A5E7C02-54AB-4281-BF56-1ADA2EACC80C@microsoft.com...
> Dear Experts,
>
> Any clues to disable the following ports on Windows NT/2000 server and
> what
> is the consequences if I disabled it ?
> netstat (15/tcp), systat (11/tcp), finger (79/tcp), POP2 (109/tcp), POP3
> (110/tcp), IMAP (143/tcp).
>
> Thanks