Security issue about NetBIOS port 139?

I would like to know what difference is between STEALTH and CLOSED for port 139.

 

Does anyone have any suggestions on which one is safer?

 

Thanks in advance for any suggestions

 

NetBIOS port 139 is STEALTH

NetBIOS port 139 is CLOSED

This might interest you.

 

https://www.grc.com/su/portstatusinfo.htm

I would like to know what difference is between STEALTH and CLOSED for port 139.

 

Does anyone have any suggestions on which one is safer?

 

Thanks in advance for any suggestions

 

NetBIOS port 139 is STEALTH

NetBIOS port 139 is CLOSED


Krusty13 wrote:

A stealthed port doesn't respond to any scan, so is invisible.

 

Closed means that the port will be detected by a port scan, so could encourage a hacker to keep trying.


Do you recommend stealthed port instead of closed port?

 

If I find any closed port, could you please give me any suggestions on how to change it into stealthed port in Norton 360?

 

Thanks you very much for any suggestions

The Norton Smart Firewall in it's default condition will offer the correct level of protection.  I don't mess with it.  If you are behind a router it probably also has a firewall to protect you.

 

Cheers.

Will it be the best to have following tested results?

 

ALL PORTS tested were found to be: STEALTH.

 

Do you have any suggestions?

 

Thanks you very much for any suggestions


oem7110 wrote:

Will it be the best to have following tested results?

 

ALL PORTS tested were found to be: STEALTH.

 

Do you have any suggestions?

 

Thanks you very much for any suggestions


YES!

 

Stealth is the best result.

Thanks you very much for suggestions

You're welcome.  I'm glad I could help.  :smileyhappy:

If Stealth is the best approach for firewall, why does each firewall not just keep them Stealth instead of Closed?

 

Will it be expensive technology to make a port Stealth?

 

Will it be good criteria to evaluate Firewall by the number of Stealth ports?

 

Does anyone have any suggestions?

 

Thanks everyone very much for suggestions


oem7110 wrote:

If Stealth is the best approach for firewall, why does each firewall not just keep them Stealth instead of Closed?

 

Will it be expensive technology to make a port Stealth?

 

Will it be good criteria to evaluate Firewall by the number of Stealth ports?

 

Does anyone have any suggestions?

 

Thanks everyone very much for suggestions


Some ports cannot be stealthed because you have some software on your system that needs to have a specific port available for communication with 'Home base'. 

 

As long as you can identify any non stealthed ports as ones your software requires, you do not need to worry.

 

if you are running any kind of server for games or backups, you will have non stealthed ports.

 

 

 

I just checked and find the results as shown below, it seems to me that Norton 360 (Home User) are targeting different market sectors as comparing with Kaspersky (Enterprise),

 

Do you agree with this comments?

 

Thanks everyone very much for any suggestions

 

For Norton 360 (Home User), more conservative on port security for Protection, not for sharing any resources.
The port found to be OPEN was: 554
Other than what is listed above, all ports are STEALTH.

 

For Kaspersky (Enterprise), more flexible on port security for customization, for sharing any resources between PC

Ports found to be STEALTH were: 135, 445
Other than what is listed above, all ports are CLOSED.
The port found to be OPEN was: 554

 

An Enterprise product is just that,for business users that need a more controlable security system to allow access by employees to specific resources.

 

Home products like 360 are just that. They are not designed for Network administrators with fine grain control requirements.

 

If a home user wants to have that kind of control, they will have to anti up for an enterprise solution. This is overkill for most home users.

 

 

 

I just understand the difference between Norton 360 and Kaspersky today, as a home user, I choose Norton 360 instead of Kaspersky.

 

However, I don't understand why Norton 360 keeps port 554 OPEN instead of STEALTH, which port is for tcp/udp information.

 

Do you have any suggestions on what the PRO and CONS are to keep port 554 OPEN?

 

Thanks everyone very much for any suggestions

A quick Google of port 554 shows it has something to do with media streaming. See this thread.   http://www.webproworld.com/webmaster-forum/threads/102223-Port-554-is-almost-always-open