Re: is it rational to close the 139 port

[Camaleón <noelamac@gmail.com>]

On Sun, 22 Jul 2012 15:25:03 +0800, lina wrote:

> strangely my netstat showed my 139 and 445 ports are open.
> 
> tcp        0      0 0.0.0.0:445             0.0.0.0:*            LISTEN 
> tcp        0      0 0.0.0.0:139             0.0.0.0:*            LISTEN
> 
> Do I need specify
> 
> -A INPUT -p tcp --dport 139 -j REJECT
> 
> in iptables?

(...)

That makes no sense.

If you have both ports open is because you have a running service that 
has opened them.

If you have such service is because you need it, otherwise it should be 
stopped.

If you need that service you will break it if you add a rule to your 
iptables.

The question is, what do you want to do?

Greetings,

-- 
Camaleón