Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: how to close ports? (not just block them)

15 Mar 2011   #1

Windows 7 Ultimate x64
how to close ports? (not just block them)


I am running windows 7 ultimate x64

after booting the pc and without visiting any website when I scan my machine localhost using command nmap -sT -O localhost

it shows the following open ports

135/tcp open msrpc
445/tcp open microsof
1025/tcp open NFS-or-I
1026/tcp open LSA-or-n
1027/tcp open IIS
1028/tcp open unknown
1029/tcp open ms-lsa
5357/tcp open wsdapi
6646/tcp open unknown

no big deal because these are all blocked to the internet with mcafee firewall but still I would like to close them for ever!

I understand 135 and 445 are usually open and I dont mind that but how about the other ports? how can I permanently close them? not just block them with the firewall?

strange thing is I see port 1027 says its IIS (internet information services) but IIS is disabled.


My System SpecsSystem Spec
15 Mar 2011   #2

Windows 7 Professional x64

Typically, you do not want to close ports without knowing exactly what they do to your system. Also, closing them for good might cause issues with your setup somewhere down the line. Google those programs / ports and see what they do for your system. Otherwise, I would just leave them be.
My System SpecsSystem Spec
16 Mar 2011   #3

W7x64 Pro, SuSe 12.1/** W7 x64 Pro, XP MCE

Perhaps, this will be of use:
My System SpecsSystem Spec

16 Mar 2011   #4

Windows 7 Ultimate x64

sussed them out with net-stat

looks like some are Trojans

TCP 135 N/A N/A LISTEN svchost.exe 832

TCP 445 N/A N/A LISTEN System 4

TCP 1025 N/A N/A LISTEN wininit.exe 532

TCP 1026 N/A N/A LISTEN svchost.exe 184

TCP 1027 N/A N/A LISTEN svchost.exe 412

TCP 1028 N/A N/A LISTEN lsass.exe 636

TCP 1029 N/A N/A LISTEN services.exe 584

TCP 5357 N/A N/A LISTEN System 4

TCP 6646 N/A N/A LISTEN McSvHost.exe 1564
My System SpecsSystem Spec
16 Mar 2011   #5

Windows 7 Pro 64bit

You are running netstat on the local machine. What's more important here is ACTIVE CONNECTIONS (established). If you want to get a more realistic idea of how secure you are, run a port-scanner from the internet. Just because your PC is listening on a port, doesn't mean there's any way possible for something outside your LAN to get wind of that and establish a session. If you have a typical SOHO router, NAT prevents that, unless you circumvent it.
My System SpecsSystem Spec
17 Mar 2011   #6

Windows 7 Ultimate x64

yes they all appear closed from a remote scan, they only show open in localhost. just wondered how to close these ports permanently? except 135 and 445
My System SpecsSystem Spec
17 Mar 2011   #7

Windows 7 Professional x64

your request is essentially filled. it doesn't matter if they are open or not. you will not be able to close them without digging around in some places where inexperienced users should not go.

if you have and use a router, it automatically filters out those ports. they are not open to the outside world.
My System SpecsSystem Spec

 how to close ports? (not just block them)

Thread Tools

Similar help and support threads
Thread Forum
Ping DG, ftp block/httpd block
Hello Guys, I find this to be quite embarrassing, having an issue like this that I can't figure out. Here's what I can't do. 1. Ping DG (Default Gateway) 2. Ping my IP ( 3. Can't access my router via remote, even though its setup to allow it.
Network & Sharing
How could you close,open-unused ports?
There is a lot of...noise,amongst not in particularly,high-power users,but also simple home or office users about open ports,net,web ports,being used,either from Windows itself or applications.DCOM is an example of a Windows service,that is "listening" to the net,but also sends data through out...
Network & Sharing
I can't block certain ports in Windows 7
I want to stop some features of a program. This program use a random port between 40.000 - 65.535 I added a rule to the firewall without any effect. I followed these steps: -Control Panel > Windows Firewall > Advanced Settings > Outbound Rules -New Rule > Port > 40000 - 65535 >...
System Security
Need to block ports for application.
I'm having a lot of trouble finding what ports an application uses. The application is called Voodo Chat, I want to block it for all of the wireless clients in my home (getting tired of them just sitting around on voodo and not doing anything done around the house :mad: ). I have a DGL-4500 router...
Network & Sharing
How to close ports
Hello, I am trying to close port 22 and 23 in Windows 7 and have done that in WIndows Forewall Advanced Settings Inbound connections New Rule, but GRC web port checker still reports above ports as open. Can you please tell me why these ports are still open?
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:27.
Twitter Facebook Google+