View Full Version : Rpc port
How do you close or block this port? I did a port scan and it showsthis port open on 135, I don't know if the 135 is the port #
or what.
I have norton firewall 2001 running and no info on how to.
Does anyone know how to do this?
Thanks
Joeteck
10-15-01, 04:08 PM
Port 135 loc-srv/epmap
Microsoft DCE Locator service aka. end-point mapper. It works like Sun RPC portmapper, except that end-points can also be named pipes. Microsoft relies upon DCE RPC to remotely manage services. Some services that use port 135 of end-point mapping are:
DHCP server
DNS server
WINS server
Port MSRPC
RPCSS.EXE service
Telnet to port 135 on older WinNT machines, type about 20 characters with CR, then disconnect, hangs service driving CPU to 100%. Only solution is to kill RPCSS.EXE. Fixed in SP3 and beyond.
epdump.exe program will list all the "end-points", which lists the RPC services running an at which ports/named pipes.
Snork: RPC datagram spoofing address of victim1, send to victim2. The two machines go into endless loop sending RPC error messages to each other. RPCSS.EXE goes to 100% utilization. Post-SP3 hotfix is "snk-fix", fixed in SP4.
If you bought a CABLE/DSL Router for about $100 bucks (hint, hint) you will not have to worry about it!!
-Joeteck:)
Thanks !!
going to purchase a router soon.
Joeteck
10-15-01, 04:20 PM
He's another solution.
Right click "My network Places" > properties
Locate "Local area connection" > right click, then properties.
Highlight TCP/IP, then click properties > advanced
Click the "option" TAB
select TCP/IP Filtering > click properties.
Then select what you want!!!
Hope this helped!!
-Joeteck :D
PS: This is with Windows 2000
vBulletin® v3.8.7, Copyright ©2000-2012, vBulletin Solutions, Inc.