firewall don't block ports 135, 445, 1026

We have windows 2003 SP1 with two network interfaces. Firewall is
enabled on both and allows only http port, but system scan shows that
ports 135, 445, 1026 is open. I tried "telnet ip 445" and it's realy
replyes.
Where is the problem?

Server2003 is supposed to continue functioning on the LAN even with the
Firewall is on. Can you imagine the destruction to a large Corp LAN that
would occur if all the Server2003's stop functioning on the LAN after the SP
was applied?...which is what would happen if it didn't respond to those
ports. Imagine the SP being applied automatically in the middle of the night
by WU, SUS, or WSUS and and they wake up in the morning with their LAN
consisting of maybe thousands of machines suddenly "stopped in its tracks".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------



"gik" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> We have windows 2003 SP1 with two network interfaces. Firewall is
> enabled on both and allows only http port, but system scan shows that
> ports 135, 445, 1026 is open. I tried "telnet ip 445" and it's realy
> replyes.
> Where is the problem?
>

In this case it wil lbe usable to leave these ports opened for LAN
network, not for any ip in ineternet.
Moreover, I don't found a way how to close these ports with firewall,
it shows that "file and printer sharing" unchecked, but port 445 still
opened.
I found way to blocked it only on TCP/IP filtering tab in network
connections details.

the RemoteAdministration feature has likely been enabled. verify by "netsh
firewall show state".
"netsh firewall set service type=RemoteAdministration mode=disable" will
shut it down, but as the other poster stated, your server will likely stop
responding in some manner.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"gik" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) oups.com...
> In this case it wil lbe usable to leave these ports opened for LAN
> network, not for any ip in ineternet.
> Moreover, I don't found a way how to close these ports with firewall,
> it shows that "file and printer sharing" unchecked, but port 445 still
> opened.
> I found way to blocked it only on TCP/IP filtering tab in network
> connections details.
>