Solved Visible ports found?

M4dn3ss · Jan 1, 2013

I ran a ShieldsUP firewall test (https://www.grc.com/x/ne.dll?bh0bkyd2) and it said that all my ports are stealthed.
However, I ran the PC Flank port scanner (PC Flank: Make sure you're protected on all sides.) and it said "The test found visible port(s) on your system: 139"
The problem is, it doesn't tell me which ports they are, and I can't find any link to a detailed results page. Does anyone know how I can find out? 139 is a lot of ports to be visible, especially when the GRC test says it's all stealthed...

logicearth · Jan 1, 2013

I don't believe that 139 means there are 139 ports, rather it is the port 139. This is nothing to actually be concerned about. A lot of times ISP have their own firewalls before you, which would block ports like 139 which is not used for legitimate purpose on the web.

Here is my advice. Don't concern yourself with scare-tactic web sites. Put your network behind a router.

M4dn3ss · Jan 1, 2013

OH
Silly me >_<

Thanks!

Alejandro85 · Jan 2, 2013

Port 139 is used for the built-in Windows file sharing, and is also a common source of security vulnerabilities if improperly exposed.

You must make a distinction if the port is exposed on the local network or to the internet. From your local network, it's a must to have the port open to allow file sharing and is common practice to leave it open, but never let it be exposed to internet, that's a real security threat and should never be open to the world.

Most likely, if you're behind a NAT router (which is quite common), plus some software firewall (even the Windows one suffices) you're already protected, as it's quite uncommon to leave this open to internet.

M4dn3ss · Jan 2, 2013

I have Windows Firewall + firewall notifier (better outbound protection) and also a NAT router, but how do I know if it's exposed to the internet?

Alejandro85 · Jan 2, 2013

Most likely it's blocked if you're behind a router. One possible way I like is to use a telnet command:

Code:

telnet 1.2.3.4 139

Put your current public IP there and the port you want to test. If it gives an error, it's blocked. Note that by default the telnet command is not installed in Win7, you must install it though Windows features => telnet client.
I think online scanners may do something like that to test open ports too.

logicearth · Jan 2, 2013

It is already block. Routers block this port by default along with other non-internet routable protocols.

M4dn3ss · Jan 3, 2013

Hmm, wonder how PC Flank determined it was "open" then?

logicearth · Jan 3, 2013

You sure the test said the ports were open? According to the test a port can be open, closed, stealth.

M4dn3ss · Jan 3, 2013

Sorry I meant "visible"; whatever that is exactly supposed to mean is beyond me
"The test found visible port(s) on your system: 139"
GRC reports that it's stealthed though.

Callender · Nov 23, 2013

I'm using Comodo Firewall to stealth ports and testing using PC Flank tests and GRC Shield's Up! tests gives different results. GRC shows all ports stealthed - PC Flank shows visible ports.

The solution that worked for me regarding Port 139 was to disable the NetBios Service then "Disable NetBIOS over TCP/IP" in the "WINS" tab as shown in the thread here:

Is it time to get rid of NetBIOS? - Wilders Security Forums

Another alternative is to try Windows Worms Doors Cleaner:

Windows Worms Doors Cleaner Free Download

You can get a list of open ports and use the program to block ports 135, 137, 139, 445.

Solved Visible ports found?

M4dn3ss

New member

My Computer

logicearth

New member

My Computer

M4dn3ss

New member

My Computer

Alejandro85

Well-known member

My Computer

M4dn3ss

New member

My Computer

Alejandro85

Well-known member

My Computer

logicearth

New member

My Computer

M4dn3ss

New member

My Computer

logicearth

New member

My Computer

M4dn3ss

New member

My Computer

Callender

New member

Attachments

My Computer

Similar threads