none
Closing Ports on Windows 7

    Question

  • Hello.
    I made a port scan and had to see that Windows7 has many open ports i dont want. I look up for these services but dont find them. How can i close these ports. I dont want any things about a Firewall config, cause i dont trust firewalls much. They are good, but closed ports are better. So I just wanna these ports defenitly closed. I dont use any of these tools or software. My question is why are they open. I think thats a security breach.
    6881 nicht reserviert gefiltert Bittorrent Standard-Port
    4662 nicht reserviert gefiltert Standard-Port eDonkey
    1214 kazaa gefiltert Kazaa Standard-Port
    5800 nicht reserviert gefiltert VNC via HTTP
    5900 nicht reserviert gefiltert VNC

    Thx for answer. And sry for my broken english.
    Sunday, July 12, 2009 9:25 PM

Answers

  • I know you say you dont trust firewalls, however I have been experimanting witht he vastly improved windows firewall in 7 and am very much impressed.
    In The advanced config section you will find you can set up rules for specific programs or ports to be open or closed, and even dynamically changed depending on the network it detects it is connected to, for example you could close https protocol on wireless but not on wired.
    I have tested the operation of the firewall and it seems very effective, unlike the previous attempts from Microsoft. Have a look in there and I am sure it will fulfill the needs you describe.


    Correct! Firewall is the only tool that can help us to control these system ports. I do not know why you do not trust firewalls. We have several tests. After disable ports via Windows Firewall, no programs could access these ports.

    To disable ports, please launch Windows Firewall, click on "Advanced settings" in the left pane. Then, in the opened window, you could set port policies for inbound or outbound. For example, if you would like to set for inbound, right-click on Inbound, choose "New rule". Select Port, click Next. Choose the correct port type and enter the port ID. Click Next and continue to finish.

     


    Arthur Xie - MSFT
    Wednesday, July 15, 2009 8:55 AM

All replies

  • I know you say you dont trust firewalls, however I have been experimanting witht he vastly improved windows firewall in 7 and am very much impressed.
    In The advanced config section you will find you can set up rules for specific programs or ports to be open or closed, and even dynamically changed depending on the network it detects it is connected to, for example you could close https protocol on wireless but not on wired.
    I have tested the operation of the firewall and it seems very effective, unlike the previous attempts from Microsoft. Have a look in there and I am sure it will fulfill the needs you describe.
    Monday, July 13, 2009 2:39 PM
  • I know you say you dont trust firewalls, however I have been experimanting witht he vastly improved windows firewall in 7 and am very much impressed.
    In The advanced config section you will find you can set up rules for specific programs or ports to be open or closed, and even dynamically changed depending on the network it detects it is connected to, for example you could close https protocol on wireless but not on wired.
    I have tested the operation of the firewall and it seems very effective, unlike the previous attempts from Microsoft. Have a look in there and I am sure it will fulfill the needs you describe.


    Correct! Firewall is the only tool that can help us to control these system ports. I do not know why you do not trust firewalls. We have several tests. After disable ports via Windows Firewall, no programs could access these ports.

    To disable ports, please launch Windows Firewall, click on "Advanced settings" in the left pane. Then, in the opened window, you could set port policies for inbound or outbound. For example, if you would like to set for inbound, right-click on Inbound, choose "New rule". Select Port, click Next. Choose the correct port type and enter the port ID. Click Next and continue to finish.

     


    Arthur Xie - MSFT
    Wednesday, July 15, 2009 8:55 AM
  • Well u hear it from many sources that the Windows firewall has many bugs and isnt save. But i hear also u cant trust desktop firewall. So i want to close my system nearly complete. And a tool is missing in the windows FW. I had Zone Alarm and it noticed me about every programm which wants acces to the internet. But the Windows FW doesn t give any notice if a programm gets blocked or wans internet acces. Even if i set the option to Notice. (dont know how its english name, have a german version) U can find it Advanced Firewall settings under Windows Firewall settings.

    But thx for ur answer.
    Friday, July 17, 2009 6:16 PM
  • You can enable Windows Firewall log and check related records in the log. Please refer the following article.

    View the Windows Firewall Log File


    Arthur Xie - MSFT
    Monday, July 20, 2009 3:19 AM
  • I know you say you dont trust firewalls, however I have been experimanting witht he vastly improved windows firewall in 7 and am very much impressed.
    In The advanced config section you will find you can set up rules for specific programs or ports to be open or closed, and even dynamically changed depending on the network it detects it is connected to, for example you could close https protocol on wireless but not on wired.
    I have tested the operation of the firewall and it seems very effective, unlike the previous attempts from Microsoft. Have a look in there and I am sure it will fulfill the needs you describe.


    Correct! Firewall is the only tool that can help us to control these system ports. I do not know why you do not trust firewalls. We have several tests. After disable ports via Windows Firewall, no programs could access these ports.

    To disable ports, please launch Windows Firewall, click on "Advanced settings" in the left pane. Then, in the opened window, you could set port policies for inbound or outbound. For example, if you would like to set for inbound, right-click on Inbound, choose "New rule". Select Port, click Next. Choose the correct port type and enter the port ID. Click Next and continue to finish.


    Arthur Xie - MSFT

    Which port type, TCP or UDP. All Local Ports or Specific Local. I allowed a friend to create a User account (standard), Which can use <as you know> a lot of settings power. She plugged in a USB stick that used this port setting: ( _#0003.Hub_#0007) this configuration was returned when I unplugged the device: (connects/creates a bridge to TV viewing)one of those late nite offers. She tried setting up an acct (online), luckily she wasn't able to complete the procedure. Anyway, I tried the steps above, but then what after 'New Rule'? I have Windows 7 Pro 64bit OS. I tried entering the reurned values but 'invald' came back , After trying different combinations (about 6) I don't want to risk destablizing my system. I am currently logged in with admin rights (local). Can you help me close this port, or even if I should and how do find out whether other ports are open that shouldn't be.? I am in firewall adv.

    Thanks  FR 


    Monday, May 06, 2013 3:46 PM