netbois

Hi. I would be obliged to know how to close my NETBOIS port. (139). Iam told that I am at risk. Sorry if Iam in the wrong place.
Many thanks in advance, Will.

 

Get a firewall (Kerio, Outpost, ZoneAlarm are all free and are all worth considering) and read the notes here.

 

Hi. Brett. Many thanks for your prompt reply. I downloaded "shieldup" and it done the trick. It is nice to know that there are people out there with knowledge. God Bless.
Regards. Will.

 

Get a firewall (Kerio, Outpost, ZoneAlarm

And make sure that File and Printer Sharing IS NOT bound to TCP/IP

If the machine is not on a Network F&PS can even be removed.

It may depend on which version of Windows you are using as to how it gets removed.

95, 98 FE, 98 SE and ME it is done through Network Icon in the Control panel.

BillyBob

 

Many thanks Billybob. Will.

 

Will - ShieldsUp is simply a test to see which of your ports are open and visible; it's not something which is downloaded and will not have done anything to protect your machine.

 

Hi.Brett, Thank you for pointing this out to me. I have now downloaded a free firewall from Sygate.com.
Much obliged, Will.

 

I downloaded "shieldup" and it done the trick.

Did you also run "Check my Ports ? "

If you run that and it reports any port to be just " CLOSED " that is not enough.

If the Firewall is working correctly they should be reported as " STEALTH. "

BillyBob

 

Hi. Billybob, When I ran "check my ports" it showed all ports closed with the exception of NETBIOS.
With Sygate Firewall turned on all ports are shown as BLOCKED.
An added comment says they are probably completely STEALTHED.
With the Firewall turned off the NETBOIS port is shown as open. I have no idea how to close this. Many thanks for your interest.
Regards, Will.

 

williamdp

When I ran "check my ports" it showed all ports closed with the exception of NETBIOS.

OUCH !!! That is just what you DO NOT want. Your machine at this point is WIDE open to the World.

I believe that is because File and Printer Sharing is bound to TCP/IP.

And/or NetBios is set to run on TCP/IP.

Open the Network Icon in the control Panel And check the TCP/IP Bindings and Unbind F&PS.

Also is you are not on a Network Remove IPX/SPX and NetBeui Protocols. Especially NetBeui.

That is what you want on ALL PORTS.

EDIT & ADD

Are you by any chance running ICQ or any messenger services. ? They will ( or may ) also hole port 139 ( NetBios ) open.

BillyBob

 

Hello Billybob, I do not run ICQ or messenger services. My system is Windows 98 SE. I can not find what you refer to. When I run Sygate Firewall all is blocked. They advise to try with Firewall "off "which indicates that NETBIOS is open.
I am still at a loss.
Many thanks, Will.

 

My system is Windows 98 SE. I can not find what you refer to.

If you are refrring to File & Printer sharing and the TCP/IP setting they should be listd when you open the Network Icon in the control panel. There you will see the various items that are installed with several tabs for the properties.

When selecting the properties of the TCP/IP ( all if more than one ) and select the Bindings tab File and Printer Sharing should be unchecked.

If file and Printer Sharing show as being install ( should be at the bottom of the list ) and you are not on a network you can just highlight it and select remove.

When I run Sygate Firewall all is blocked

I suspect that here you mean when you run the Port check with Sygate enabled.

If so you should be OK. But I am not familiar with Sygate. Si maybe someone who is can help out here.

BillyBob

 

Although Port 139 can be closed (without using a firewall) simply by renaming the file vnbt.386, this is not really the ideal solution. The subject of how best to secure your computer is really rather complex and I suggest that you spend a bit of time reading the information here and on the pages to which that one links. Post back if, having read the information, you have any specific questions.

BillyBob has raised the issue of NetBIOS Over TCP/IP which does indeed pose a security risk. EBURGER probably provides the easiest way of adjusting your configuration so that it is more secure.

 

I finally got a chance to do some checking last evening. 8 extra people in the house kinda slowed me down. 5 of them ranging from 1 to 9 years in age. And all wanting to play on the computers. You can guess where my time was spent.

WOW !! it is quiet here this morning

I checked things out on my three machine which are on a LAN using either 98 or 98SE and a Linksys Router/Switch with Cable Modem.

Each machine has three TCP/IP. Dial-UP, VPN and NIC.

I have NOTHING bound to any TCP/IP on any machine.

BillyBob

 

Hi. Brett and Billybob,
Many thanks for your continued interest. Iam still reading the information reeived about NETBIOS.
Regards, Will.