View original (French)

Netbios-ssn

tcharantcho Posted messages 182 Registration date   Status Member Last intervention   -  
tcharantcho Posted messages 182 Registration date   Status Member Last intervention   -
Hello,

I want to know exactly what the netbios-ssn port 139 does??

Is it related to the security of the PC itself?

If I disable all incoming and outgoing ports (139) on the firewall, what will be the impact?

I noticed when I type the netstat command in cmd, there are strange lines with the remote address of one of the PCs connected to my network using port 139. Is this a form of attack from the external PC or is it just 'normal' to see these lines (2 lines)?

Thanks

Configuration: Windows 7 / Safari 534.13

3 answers

  1.
    brupala Posted messages 111174 Registration date   Status Member Last intervention   14 455
     
    Hello,
    this service is simply one of the two ports used to access Microsoft's network services (shares), the other being 445.
    this port should be blocked in all firewalls to prevent the Windows network from being directly accessible from the internet, as it would be a major security flaw.
    to access network services from the internet, a secure connection is opened in a VPN.
    --
    and ... There you go!
    3
  2. tcha
     
    ok, and for the 2 lines displayed in my console, is it an attack or intrusion via netbios?
    0
    1. brupala Posted messages 111174 Registration date   Status Member Last intervention   14 455
       
      What are these two lines?
      If you have any doubts, you can stop the client for Microsoft networks and file and printer sharing on your connection.
      In Windows 7, you can also configure your connection as an internet network instead of a home or work network.
      0
  3. tcharantcho Posted messages 182 Registration date   Status Member Last intervention   13
     
    ok thank you ...
    0