Help with Linksys router

[CRUZMISL]

Hi All,
I am running Linksys 4 port router and recently ran the security scan. It says all ports are closed except ports 135-139UPD. I can't get them to close to save my own life. Any ideas? I am running XP. I tried filtering the ports via the linksys website update but it doesn't work for whatever reason.

Any ideas appreciated.

Joe

[cyberskye]

Are you running in stealth mode?
HAve you enabled any of the "pass-thru's" - UPnP, etc?

[CRUZMISL]

How do I determine that? I haven't changed anything really since I hooked it up aside from a specific IP address and don't allow anonymous stuff through. IS there a tutorial somewhere or can you give me some tips?

Thanks,
Joe

[TonyT]

139 is open because you probably have TCP\IP Internet Protocol bound to File & Print Sharing.

Rt clcik Network icon on desktop.
Click Properties.
Click LAN ONE time.
Click Advanced Manu at top.
Click Advanced settings
Uncheck TCP\IP nect to File and Print Sharing and Client for MS networks.

Then do a Google search for NetBeui on XP and install Netbeui for file & print sharing, or if have no other computers on network leave as is.

Port 135 should not be opened. Access your router control panel sceurity section and disable UPnP.

Thyen, on your computer, go to control panel\administrative tools\services and open services applet. DISable Messenger Service. (uses port 135 and keeps it opened)

[CRUZMISL]

Hmm, this is frustrating.

I have completely uninstalled everythig aside from the TCP/IP protocols and still open from 135-139. UPnP is disabled too and still open then went to the service menu to disable messenger and it's not there. I think I did it yesterday. Everything still open. Any other ideas?

Here's what I'm looking at
http://www.canamcaravan.com/ports.GIF

[cyberskye]

Have you read the user guide? The default config should not forward any of those ports.

It's almost like you have your box set in the dmz...

I am no M$ expert, but I don't see how Windows XP settings might affect a portscan against the router's WAN link.

[TonyT]

Delete your cookies and temp internet files prior to rerunning a web based port scan. Often these server side port scans rely upon cookies and cached pages, depending on your browser settings.

Did you UNBIND TCP\IP Internet Protocol from file & print sharing and ms client as I suggested?

If so, and you deletes the files above, and you rerun the scan, and it still shows those ports as open, then:

1. you may have a trojan
2. your router is misconfigured
3. another appliocation is locking those ports open.

Try running a port scan from another site.

[CRUZMISL]

I uninstalled the MS client but is there another area where the file sharing is located? If so how do I disable it?

Thanks,
Joe

[TonyT]

Dude, don't uninstall MSClient. Do what I said earlier above:

Rt clcik Network icon on desktop.
Click Properties.
Click on LAN ONE time. (local area connection)
Click Advanced Manu at top.
Click Advanced settings
Uncheck TCP\IP nect to File and Print Sharing and Client for MS networks.

[CRUZMISL]

OK, I installed the MS client and unchecked this box. Is this where I want to be?

http://www.canamcaravan.com/option.GIF