open port?

[razey]

i have scanned my pc for open ports.
Request IP Responded
21 ftp File Transfer [Control]
25 smtp Simple Mail Transfer
59 any private file service
79 Finger
110 pop3 Post Office Protocol -
135 loc-srv Location Service
139 netbios-ssn NETBIOS Session
445 Microsoft-DS
5000 commplex-main

i currently run a web server. i dont use pop3 or smtp? is there a wey to shut these ports off? do i have to turn the software off to make it stop listening to these ports? if you see anything else i should do. please recomend it to me =) thank you,
steve

 

[bjverzal]

What operating system ? That would be helpful information. If it is UNIX, edit /etc/services and put a "#" in front of each one you want to shut down.

Bill.

 

[razey]

sorry, i am currently running windowsXP, and Win2K
thank you,
steve

 

[bjverzal]

If you're running IIS, change the configuration of what services you want enabled.

Go into services and stop the ones listed above.

Comment out the offending ones in

C:\WINNT\SYSTEM32\DRIVERS\ETC\SERVICES

After doing this, you should be more secure.

Bill.

 

[razey]

nope, i am not running iis, or at least i do not think i am :\ currently i am running apache for my webserver. are all these ports open because there is software that is currently useing them?
thank you,
steve

 

[SteveTheGeek]

Apache on Win2k? Do you mean your webserver is Linux/Unix, and your LAN is Win2k/XP? So are you scanning your webserver, or your LAN? My assumption would be your LAN, based on the scan.

The ports are open because there are services using them. Unfortunately, you can't necessarily just turn off NetBIOS or DS (if it's a LAN server), so I'd strongly recommend either #1: dropping a firewall in (even a SOHO type, for a couple hundred bucks), as merely turning off services isn't going to protect your LAN adequately, and/or #2: getting a good book on Win2k security and implementing the recommendations.
-Steve