Hello people ! Today in this post I just wanna tell you how to close some vulnerable ports on windows OS (even if you have antivirus) to make more security for your laptop or PC.
OK , all of us know that always antivirus programs , do the rest of things , but you should pay money for it. And also you should pay lots of money for perfect one to make you really secure and do more than rest of the things. Anyway we are not here to talk about antivirus programs , lets start.
Why we should close some ports on windows?
Cause there are some vulnerable ports , which are open by default on windows , and they have some uses as I read , but if you just google the number of port , you will prefer to close it instead of leaving it open.
And also you should know that most of ransomware programs are just exploiting vulnerable ports. For example , the Wannacry ransomware can get in your PC by lots of ways , but one of them is the port 139 on windows which is TCP.
Which ports are vulnerable on windows?
As I figured out , the port 139 and 135 are the most dangerous ports , and it's better to close them (Also maybe you never change anything on your windows and you never get hacked or anything , but it's better to make your self and your systems as secure as possible).
Also there is a port 445 which makes your windows vulnerable , it is used for the SMB (server message block) and if you are using printers and other stuff , for easier usage is better to close this port too. But if you think you don't have enemies to hack you , leave it open.
excuse me , what is port?
Any way for making connection to an OS and outside an OS is port. In other words ports are like doors and windows of a room and each one has its' usage. For example the door of room is for people to come in and go out , and it can be closed by it's lock , and no one can get in or out. The window of room is for getting fresh air and the light of sun to the room , and also it can be used for looking outside the room.
And if we think that the cracker is the thief coming to that room ; he can get in by the door if you don't close it , or if you close it but forget the window to close , he will get inside by the window.
Now , did you understand what is a port? If not , search the google , unfortunately I cannot explain better than this.
How to see the ports are open?
First just check it your self to see are those ports open or not. You can do it by typing 'cmd' in search bar of windows start menu and opening it. Then after CMD opened , type 'netstat -a' in cmd. It shows a long list , scroll up to see the command you entered , and now read the list from first. it is something like this :
The command in this image is different but it does the same. and look at the top of the list. 0.0.0.0 :135 is showing the open port and also the same for 445.
Or if you want do it by other devices , use nmap tool! enter ip of windows device and it will show you the open ports.
How to close them?
search firewall in search bar , it show 'windows fire wall advance security' open it and you will see this :
On the left side you see 'inbound rules' and 'outbound rules' (we should write rules for both of them)
First click on inbound rules and on top right side of window click on 'New rule' . A window pops up , select the 'port' option and click next , choose tcp at top and choose 'specific local ports' at downer side , and enter the number of port for e.g 135.
Then click next then click block all connections and click next , check all three options and type a name and description for it and do the same on 'outbound rules'
That's it ! Now you know how to block connections to a port. I hope you enjoyed this post and have a nice and secure crypto day!