Hi Jim, Could be. I'll have to uninstall IIS from one of these machines and see if the port goes away. I'd be really interested on your take on the MMC paradox! Tom www.isaserver.org/shinder -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Sunday, October 07, 2001 7:53 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to "remove" port 139 http://www.ISAserver.org Actually, that may be too specific. 135 is RPC 137 is NBT Name service (WINS / broadcast) 138 is NBT Datagrams (data packets) 139 is NBT session (state) Lots of Windows services use these in varying degrees (137 is often used when DNS fails). Also, I may have found out why some folks can't get the remote ISA MMC to work, but I'm trying to verify it. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, October 07, 2001 5:43 PM Subject: [isalist] Re: How to "remove" port 139 http://www.ISAserver.org Hi Jim, I think I read it in Norberg's Securing NT/2000 Servers. I might be wrong and he might have said 135 :-) I'm trying to find it in my pile of books, but I think my dear wife stole it from me for one of her projects. ;-\ Thanks! Tom www.isaserver.org/shinder -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Sunday, October 07, 2001 7:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to "remove" port 139 http://www.ISAserver.org Hi Tom, Why is it that you associate IIS5 with port 139? Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Sunday, October 07, 2001 5:29 PM Subject: [isalist] Re: How to "remove" port 139 http://www.ISAserver.org Hey Guys, I believe the dreaded IIS 5.0 is responsible for the 139. Uninstall IIS and see if it melts away. However, with packet filtering no one is going to get to it. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Thor@xxxxxxxxxxxxxxx [mailto:Thor@xxxxxxxxxxxxxxx] Sent: Sunday, October 07, 2001 4:09 PM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to "remove" port 139 http://www.ISAserver.org How to "remove" port 139Remove the binding from File and Printer Sharing. You should really remove bindings from everything you don't expressly need, leaving it bound to IP only if possible. AD ----- Original Message ----- From: Ruben Spruijt / Rspruijt.com To: [ISAserver.org Discussion List] Sent: Sunday, October 07, 2001 1:59 PM Subject: [isalist] How to "remove" port 139 http://www.ISAserver.org Hi List, Can anyone tell me how to disable port 139 from the outsite. I am using MS ISA Server 2000 Enterprice Edition.. With regards, Ruben Spruijt ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')