Welcome to day 21. Today we will talk about port 135. In a simple way, we have these basic information: Port: 135 May be used by:
However, there are still some situations where you may need to add some exceptions to remote connection on this port, such as: - some MS SQL Server scenarios. - some WMI (Windows Management Instrumentation), which is quite useful for CLI administration. Whatever is the reason you need it to be open, make sure you will restrict it at the maximum possible way. Example of a port 135 traffic (from pcapr): 01:48:35.511258 IP 1.0.0.1.3949 > 1.0.0.2.135: S 2182823608:2182823608(0) win 8760 <mss 1460,nop,nop,sackOK> ------------------------------------------------------------ Pedro Bueno (pbueno /%%/ isc. sans. org) Twitter: http://twitter.com/besecure |
Pedro 155 Posts ISC Handler Oct 21st 2009 |
Thread locked Subscribe |
Oct 21st 2009 1 decade ago |
i'm surprised this port report wasn't done earlier... before ICMP, before telnet, before SSH, before FTP... you get the point.
|
Anonymous |
Quote |
Oct 21st 2009 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!