1, close ports such as 7.9: close simple TCP/IP services and support the following TCP/IP services: character generator, daytime, discard, echo and quotation of the day.
2. Close port 80: Close the WWW service. The name displayed in "Service" is "World Wide Web Publishing Service", which provides web connection and management through the snap-in of Internet information services.
3. Close port 25: Close the Simple Mail Transfer Protocol (SMTP) service, which provides the function of sending e-mail across the network.
4. Close port 2 1: Close the FTP publishing service and provide FTP connection and management through the Internet information service management unit.
5. Close port 23: Close the Telnet service, which allows remote users to log on to the system and run console programs using the command line.
6. It is also important to shut down the server services that provide RPC support, files, printing and naming pipes. Turning it off will turn off win2k's default * * * enjoyment, such as ipc$, c$, admin$ and so on. The shutdown of this service will not affect your other operations.
7. The other port is 139, which is a NetBIOS session port for file and print * * *. Note that the unix machine running samba has also opened the 139 port, which has the same function. In the past, streamer 2000 was not very accurate in judging the host type of the other party. It is estimated that the 139 port is open, and it is considered to be an NT machine, but it is ok now. The way to turn off 139 listening is to select the Internet Protocol (TCP/IP) attribute in the LAN connection in the network and dial-up connection, enter the advanced TCP/IP settings and WINS settings, and there is an item "Disable NETBIOS of TCP/IP", and then tick off the 139 port. For individual users, it can be set to "Disabled" in various service attribute settings to avoid restarting the service and opening the port next time.
Each service corresponds to a corresponding port. For example, as we all know, the port of WWW service is 80, smtp is 25 and ftp is 2 1. These services are started by default in win2000 installation. Individual users are really unnecessary. Closing a port means closing useless services.
In the control panel "Administrative Tools" in "Services".
1, close ports such as 7.9: close simple TCP/IP services and support the following TCP/IP services: character generator, daytime, discard, echo and quotation of the day.
2. Close port 80: Close the WWW service. The name displayed in "Service" is "World Wide Web Publishing Service", which provides web connection and management through the snap-in of Internet information services.
3. Close port 25: Close the Simple Mail Transfer Protocol (SMTP) service, which provides the function of sending e-mail across the network.
4. Close port 2 1: Close the FTP publishing service and provide FTP connection and management through the Internet information service management unit.
5. Close port 23: Close the Telnet service, which allows remote users to log on to the system and run console programs using the command line.
6. It is also important to shut down the server services that provide RPC support, files, printing and naming pipes. Turning it off will turn off win2k's default * * * enjoyment, such as ipc$, c$, admin$ and so on. The shutdown of this service will not affect your other operations.
7. The other port is 139, which is a NetBIOS session port for file and print * * *. Note that the unix machine running samba has also opened the 139 port, which has the same function. In the past, streamer 2000 was not very accurate in judging the host type of the other party. It is estimated that the 139 port is open, and it is considered to be an NT machine, but it is ok now.
The way to turn off 139 listening is to select the Internet Protocol (TCP/IP) attribute in the LAN connection in the network and dial-up connection, enter the advanced TCP/IP settings and WINS settings, and there is an item "Disable NETBIOS of TCP/IP", and then tick off the 139 port.
For individual users, it can be set to "Disabled" in various service attribute settings to avoid restarting the service and opening the port next time.
I'll introduce you to a method of manual setting in windows.
Local connection, status, properties, tcp/ip protocol, advanced options, properties, enable TCP/IP deletion, and only fill in the required ports. Don't want the rest.
There are also some default ports that need to be manually modified in the registry.
1. Close port 139: Port 139 is a NetBIOS session port, which is used for file and print * * *. Note that the unix machine running samba has also opened the port 139, which has the same function. The way to turn off 139 listening is to select the Internet Protocol (TCP/IP) attribute in the LAN connection in the network and dial-up connection, enter the advanced TCP/IP settings and WINS settings, and there is an item "Disable NETBIOS of TCP/IP", and then tick off the 139 port.
2. Close port 445: modify the registry and add a key value.
[HKEY _ LOCAL _ MACHINE \ SYSTEM \ current control set \ Services \ NetBT \ Parameters]
" SMBDeviceEnabled " = dword:00000000
Port number of QQ: 4000 if surfing the Internet at home.
But the coral version is after 3000.