Firewal doesn't close 135 port

Sep 15 04 8:00 am

In my port security window I have opened only 80 and 1024-4096, but different port scanners show that I have opened 135 port and, besides, I regulary receive different messages, sent using RPC.

Sep 15 04 1:25 pm

http://forums.qbik.com/viewtopic.php?t=2706

How does your IP match up when using those tests? Is it the same IP that WinGate sees or an IP address of the intermediate device? (When you are testing it)

Sep 17 04 8:02 am

Hmm... I'm not sure that fully understood u. Everywhere the only one ip - my external ip.

Sep 17 04 8:05 am

I mean those sites, which I use to test myself, see my real ip... Not the ip of my cable modem or smth else. If u want - I can give u my ip, and u'll test me by yourself... But, I think, u can get my ip easily ;))

Sep 17 04 10:26 am

Yeah, I was wondering if it was hitting an intermediary device (Such as another nat / firewall device on your local network) before hitting the WinGate machine. So that it might be an open port response from that device.

However, Neil mentioned something yesterday which might be of interest. Check the port ranges for "Connections from the Internet" for UDP. Make sure that those ranges are configured properly.

Sep 18 04 3:24 am

Hmm... Yeap... I had opened UDP ports 1024-4096... Strange. Closed them. Will see, what will change... :)

Sep 18 04 3:26 am

Or this UDP range is ok and it is not the reason of differnet "enlarge your pennis" and "your computer is under the risk" :))) messages?

Sep 21 04 8:54 pm

These messages normally come in on port 1025 or 1026 UDP, so that port range of 1024-4096 would have let them in.

Adrien

Sep 22 04 5:39 am

I guess u are right, cause there are no more messages after I closed those udp range. :)