Port is blocked, but port scanner shows it open...

[joeka77]

Hello,
i used a ports-scanner and it shows me a lot of open ports on one of my servers. Between the scanning workstation and the server is a cisco router. I tried to block one port by configuring an access group (i have experience with that, so it should work) and blocked port 119. Consequently NNTP didnt work any longer. BUT: Scanner shows Port 119 already open?? What is the reason?? How can i configure the router that ports are not be shown open by scanners...? (Please dont recommend a firewall...). Thanx for Info

 

[MJewell]

Okay, here's the deal, the Router is blocking any traffic on the ports, however that doesn't stop the server from having the ports open. Assuming your runnign Win2k Server, remove all options you don't need, if your not running NNTP, remove the service from Add/Remove programs:Add/Remove Windows components:IIS Server:NNTP...

To secure all your servers, remove any options you don't need, you can always re-add options later... basically, if it's not a web server, you shouldn't even think of having IIS installed....

Mike

 

[joeka77]

Than you for the information! Again one question: Somebody knows what kind of traffic network scanner use to check ports? Any chance to block this?