RE: [cobalt-users] Port 445

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

> 
> On my RAQ3 I have been getting a lot of alerts through 
> Portsentry relating 
> to port 445.  It lists this port as Microsoft-DS.  I have 
> found a lot of 
> references to this in other newsgroups, although always in 
> reference to Win 
> 2k servers.  Even then, it isn't clear to me what the port is 
> for.  Does 
> anyone know what this port is for and why there seems to be 
> so much interest 
> in it?
> 


As you rightly say this is Microsoft-DS which is Directory Services,
relating to the new active directory structure related to windows 2000
and I believe XP servers.
It sounds like your Raq is connected to a switch/hub/router that is
allowing other servers to broadcast this information over the subnet.
If this is in a shared hosting location you could email the hosts and
inform them that their boxes are sending out broadcasts, although I'm
unsure as to if/how they can block these out as I'm not a windoze
person.

Other than that, it does no hard to linux boxes, and that Portsentry has
been working correctly and blocking these incoming port requests as it
should.
Your linux box won't be sending these, and similarly it won't be
listening for these (hence why its been intercepted by portsentry)

Regards,

Andy
andy@xxxxxxxxxxxxxxxxxxxxx
http://ineedlinux.info/