Re: How to Disable Microsoft Networking Port Listeners?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Phillip Windell (_at_.)
Date: 10/25/04


Date: Mon, 25 Oct 2004 13:28:33 -0500

I never heard of removing it. Disabling them is the right thing to do,..as
I believe you have done. It is unrealistic to expect them to vanish from
Netstat because there are multiple "interfaces" on a machine even if there
is only one NIC,...remember there is always the 127.0.0.1 (localhost) and if
there is a Firewire interface (many are built into the MB now) it will also
act as an active interface. I don't believe that "Netstat -a" indicates
which specific interface something is listening on,...it is just going to
list what is listening at all anywhere as far as I know.

You have to keep the right perspective and not chase after ghosts. If
something is not "bound" to a particular interface then it is not going to
be available to that interface no matter where ever else it is "listening".
If that isn't the case, there is no point to the "binding" in the first
place and an OS that is that "sloppy" would have it's poor condition shouted
from the mountaintops, everyone in the business would know about it, and it
would have never survived in the market.

-- 
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
"CHANGE USERNAME TO westes" <DELETE_westes@earthbroadcast.com> wrote in
message news:OMYH4truEHA.684@TK2MSFTNGP10.phx.gbl...
> If you open Control Panel | Add Remove a Program | Windows Components,
there
> is no option to install or not install "MS Networks Service" under Windows
> 2000.
>
> What are you referring to?    Can you be explicit about which Windows 2000
> applications to open and when menus and dialogs to select?
>
> -- 
> Will
> westes AT earthbroadcast.com
>
>
> "A P" <ap@textguru.ph> wrote in message
> news:OjjTivkuEHA.4028@TK2MSFTNGP15.phx.gbl...
> > Do not install MS Networks Service. And disable some of the services.
> under
> > Administrative Tools.
> >
> > "CHANGE USERNAME TO westes" <DELETE_westes@earthbroadcast.com> wrote in
> > message news:u45$1UfuEHA.684@TK2MSFTNGP10.phx.gbl...
> > > On a machine that must be directly on the Internet (it is acting just
as
> a
> > > sniffer), I have disabled Microsoft client and server, and just about
> > every
> > > service that wasn't critical for system function.   When I do a
> netstat -a
> > > command, I still see the following services:
> > >
> > > TCP EPMAP
> > > TCP MICROSOFT-DS
> > > TCP 1025
> > > TCP NETBIOS-SSN
> > > UDP MICROSOFT-DS
> > > UDP 1026
> > > UDP NETBIOS-NS
> > > UDP NETBIOS-DGM
> > > UDP ISAKMP
> > >
> > > I don't want all of these Microsoft domain and NETBIOS listeners
running
> > on
> > > this machine.    Even though in theory they are set off, the fact that
> > there
> > > are listeners still means there is a code path inside of code that is
> > > notoriously buggy and ridden with back doors that hackers can exploit.
> > Is
> > > there any way to make the machine safe?
> > >
> > > Yes I can use a firewall or packet filters if necessary, but I prefer
to
> > > just turn off all of the options on the machine before I start to look
> at
> > > firewalls.
> > >
> > > --
> > > Will
> > > westes AT earthbroadcast.com
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Soekris net5501-70 problem with loading ATA modulesonFreeBSD-Current
    ... miibus0: <MII bus> on vr0 ... pcib1: subordinate bus 1 ... isa_probe_children: disabling PnP devices ... DHCP timeout for interface vr1 ...
    (freebsd-current)
  • Re: Browsing over VPN/Multiple domians
    ... one interface is building a browse list for the segment. ... the RRAS addresses in a different subnet from the LAN machines. ... > it didn't disable NetBIOS on RRAS interface. ... > manual disabling NetBIOS over TCPIP - VPN client NetBIOS ...
    (microsoft.public.win2000.ras_routing)
  • Re: Browsing over VPN/Multiple domians
    ... >on all of the other interfaces (including the RRAS ... interface which remote ... disabling Netbt on the RRAS ... >> it didn't disable NetBIOS on RRAS interface. ...
    (microsoft.public.win2000.ras_routing)
  • Re: Browsing over VPN/Multiple domians
    ... it didn't disable NetBIOS on RRAS interface. ... manual disabling NetBIOS over TCPIP - VPN client NetBIOS ... Status of PPP adapter RAS server interface: ...
    (microsoft.public.win2000.ras_routing)
  • Re: How to Disable Microsoft Networking Port Listeners?
    ... netstat -a shows active listeners on some undefined interface, ... many companies whose networks were being hacked blind, ... > act as an active interface. ... > list what is listening at all anywhere as far as I know. ...
    (microsoft.public.win2000.networking)