Win7 methods for safely shutting down ports 139, 135, 445, etc.

Win7 methods for safely shutting down ports 139, 135, 445, etc.

1. On the Start menu, select Run, enter "Gpedit.msc" and return, and open the local Group Policy Editor. Expand Computer Configuration---Windows Settings---Security settings---IP Security policy on the local computer.

2. To close 135 ports for example (other port operations are the same):

Right-click in the right margin of the local Group Policy Editor, select Create IP Security policy, eject the IP Security Policy Wizard dialog box, click Next, write "Close port" in the name of the dialog box that appears (fill it out at will), click Next; do not tick the "Activate Default response rule" option in the dialog box. Then click Next, check Edit properties, and click Finish.

3, in the "Close Port Properties" dialog box that appears, select the Rules tab, remove the check before using the Add Wizard, and click the Add button;

4, in the pop-up "New Rule Properties" dialog box, select the IP Filter List tab, click the lower left corner of the "add"

5, the presence of Add dialog box, the name of the "Seal port" (can be filled out at will), remove the "Use Add Wizard" Before the check, click the right side of the "Add" button

6. In the IP Filter Properties dialog box that appears, select the Address tab, select "Any" from "Source Address", "Destination Address" and select "My IP Address"; Select the Protocols tab, and the settings are shown in the picture. Click "OK" when you set it.

7, return to "IP Filter List", click "OK". Return to the New Rule Properties dialog box;

8. In the IP filter list, select the "Seal port" that you just added, and then select the Filter Actions tab, remove the tick in front of the "Use Add Wizard" and click the "Add" button;

9. In filter action properties, select the Security Methods tab, select the Block option, and in the General tab, name the operation, and click OK;

10, select the new "New 1" just now, click Close, return to the "Close Port Properties" dialog box, confirm the "IP Security rules" in the port rule is selected, click OK;

11, in the Group Policy Editor, you can see just the new "close port" rule, select it and click the right mouse button, select the "Assign" option, so that the rule to start applying!

To this end, the same way you can add a rule on any port you want to restrict access to

Attention matters

Note: IPSEC services must not stop this service. Oh, stop the IP policy will not work. Use Windows Group Policy to shut down all dangerous ports that you want to shut down at once.