blocking port
17 years 3 weeks ago #23842
by sose
sose
Network Engineer
analysethis.co/index.php/forum/index
blocking port was created by sose
how to I the registry to change the default port for remote desktop connection to prevent intruders and also the deault port for IIS network services
thanks
thanks
sose
Network Engineer
analysethis.co/index.php/forum/index
17 years 3 weeks ago #23843
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: blocking port
RDP -
[code:1]Under the Key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
Find the Sub Key
PortNumber (Default Value 00000D3D, Hex for (3389))
Enter the new port number in Hex.[/code:1]
IIS (Presuming Windows 2003)
[code:1]IIS can be done within the IIS Manager
expand to the website (usually Default Website)
Right Click --> Properties
The first tab (Web Site) has the TCP Port, just change this value and restart the website.
[/code:1]
Its worth noting that although it can help deter the attack, it will do nothing about preventing it. Its not that difficult to fingerprint the services/port to see whats actually running on them.
[code:1]Under the Key
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp
Find the Sub Key
PortNumber (Default Value 00000D3D, Hex for (3389))
Enter the new port number in Hex.[/code:1]
IIS (Presuming Windows 2003)
[code:1]IIS can be done within the IIS Manager
expand to the website (usually Default Website)
Right Click --> Properties
The first tab (Web Site) has the TCP Port, just change this value and restart the website.
[/code:1]
Its worth noting that although it can help deter the attack, it will do nothing about preventing it. Its not that difficult to fingerprint the services/port to see whats actually running on them.
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Time to create page: 0.114 seconds