Netbios-ssn

tcharantcho Posted messages 182 Registration date   Status Membre Last intervention   -  
tcharantcho Posted messages 182 Registration date   Status Membre Last intervention   -
Hello,

I want to know exactly what the netbios-ssn port 139 does??

Is it related to the security of the PC itself?

If I disable all incoming and outgoing ports (139) on the firewall, what will be the impact?

I noticed when I type the netstat command in cmd, there are strange lines with the remote address of one of the PCs connected to my network using port 139. Is this a form of attack from the external PC or is it just 'normal' to see these lines (2 lines)?

Thanks

Configuration: Windows 7 / Safari 534.13

3 réponses

brupala Posted messages 111399 Registration date   Status Membre Last intervention   14 430
 
Hello,
this service is simply one of the two ports used to access Microsoft's network services (shares), the other being 445.
this port should be blocked in all firewalls to prevent the Windows network from being directly accessible from the internet, as it would be a major security flaw.
to access network services from the internet, a secure connection is opened in a VPN.
--
and ... There you go!
3
tcha
 
ok, and for the 2 lines displayed in my console, is it an attack or intrusion via netbios?
0
brupala Posted messages 111399 Registration date   Status Membre Last intervention   14 430
 
What are these two lines?
If you have any doubts, you can stop the client for Microsoft networks and file and printer sharing on your connection.
In Windows 7, you can also configure your connection as an internet network instead of a home or work network.
0
tcharantcho Posted messages 182 Registration date   Status Membre Last intervention   13
 
ok thank you ...
0