how do you close open ports on your machine

[Dmasch]

When I go out to dos and type netstat -a I see many ports that I do not reconize as being open. How do I close these ports. I have a router based firewall and a personal firewall on my computer. Neither of which I have authorized to open any of these ports. Can anyone shed any light on what you think is going on. Have I been hacked?

 

[gbiello]

One way to close ports is to turn off unused services and applications. See what applications and processes are running in Task Mangaer.

Under TCP/IP properties, Advanced, Options tab, you can allow or deny certain ports.

You could always post the results of your netstat -a.

hope this helps,
-gbiello

 

[Killman]

You can open the "services" file with notepad located in the System 32 directory > drivers > etc. This is a list of of ports #'s used by well know services. This might narrow it down a bit for you and to why these ports are in use.

 

[Dmasch]

Active Connections

Proto Local Address Foreign Address State
TCP DustinXP:epmap DustinXP:0 LISTENING
TCP DustinXP:microsoft-ds DustinXP:0 LISTENING
TCP DustinXP:1025 DustinXP:0 LISTENING
TCP DustinXP:1027 DustinXP:0 LISTENING
TCP DustinXP:3389 DustinXP:0 LISTENING
TCP DustinXP:3669 DustinXP:0 LISTENING
TCP DustinXP:5000 DustinXP:0 LISTENING
TCP DustinXP:5600 DustinXP:0 LISTENING
TCP DustinXP:5601 DustinXP:0 LISTENING
TCP DustinXP:5602 DustinXP:0 LISTENING
TCP DustinXPop3 DustinXP:0 LISTENING
TCP DustinXP:8431 DustinXP:0 LISTENING
TCP DustinXP:netbios-ssn DustinXP:0 LISTENING
TCP DustinXP:3669 baym-cs103.msgr.hotmail.com:1863 ESTABLISHED
TCP DustinXP:3789 192.168.1.2op3 TIME_WAIT
TCP DustinXP:3790 192.168.1.2op3 TIME_WAIT
TCP DustinXP:11794 DustinXP:0 LISTENING
UDP DustinXP:epmap *:*
UDP DustinXP:microsoft-ds *:*
UDP DustinXP:isakmp *:*
UDP DustinXP:1028 *:*
UDP DustinXP:1029 *:*
UDP DustinXP:1044 *:*
UDP DustinXP:1107 *:*
UDP DustinXP:1117 *:*
UDP DustinXP:ntp *:*
UDP DustinXP:1043 *:*
UDP DustinXP:1900 *:*
UDP DustinXP:3671 *:*
UDP DustinXP:ntp *:*
UDP DustinXP:netbios-ns *:*
UDP DustinXP:netbios-dgm *:*
UDP DustinXP:1900 *:*
UDP DustinXP:16487 *:*
UDP DustinXP:33878 *:*

 

[gbiello]

Check out

http://www.ez-pc.org/bd/ez/ports.asp?printable=yes

It has a thorough list of well-known port numbers. It should be an easy matter to match up the ports with the protocols.

For instance 5600-5602/tcp is Enterprise Security Manager and Agent

-gbiello