Port 135: Microsoft runs dce rpc end-point mapper for its DCOM Service on this port. This is similar to the function of UNIX port 111. Services using DCOM and RPC use end-point mapper on the computer to register their locations. When remote customers connect to a computer, they find the end-point Mapper to locate the service location.
Port 135 is mainly used to use the Remote Procedure Call Protocol and provide the DCOM (Distributed Component Object Model) service, by using RPC, programs running on a computer can smoothly execute code on a remote computer. By using DCOM, you can directly communicate through the network, it can transmit data across multiple networks, including HTTP.TheWindows Firewall: Allow remote administration exceptionSetting allows you to specify whether computers running Windows XP with SP2 can be remotely administered by applications that use TCP ports 135 and 445 (such as MMC and WMI ), and is shown in the following figure.
Services that use these ports to communicate are using remote procedure CALS (RPC) and Distributed Component Object Model (DCOM) to access remote hosts. in effect, Windows Firewall adds svchost.exe and lsass.exe to the program exceptions list and allows those services to open additional, dynamically assigned ports, typically in the range of 1024 to 1034. windows Firewall also allows incoming ICMP echo messages (also known as the ICMP echo request messages ).
You can select the following:
Not Configured (default)
Remote Administration is not allowed.
Enabled
Windows Firewall allows the computer to receive the unsolicited incoming messages associated with remote administration. InAllow unsolicited incoming messages from, Type*To specify traffic originating from any source IPv4 address or a comma-separated list of sources. The sources can beLocalsubnetTo specify traffic originating from a directly reachable IPv4 address or one or more IPv4 addresses or IPv4 address ranges separated by commas. IPv4 address ranges typically correspond to subnets. for IPv4 addresses, type the IPv4 address in dotted decimal notation. for IPv4 address ranges, you can specify the range using a dotted decimal subnet mask or a prefix length. when you use a dotted decimal subnet mask, you can specify the range as an IPv4 network ID (such as 10.47.81.0/255.255.255.0) or by using an IPv4 address within the range (such as 10.47.81.231/255.255.255.0 ). when you use a network prefix length, you can specify the range as an IPv4 network ID (such as 10.47.81.0/24) or by using an IPv4 address within the range (such as 10.47.81.231/24 ). the following is an example list of sources:
NoteThis command is shown on multiple lines for better readability; enter them as a single line.
LocalSubnet,10.91.12.56,10.7.14.9/255.255.255.0,10. 116.45.0/255.255.255.0,172.16.31.11/24,172.16.111.0/24
IPv6 traffic supports*AndLocalsubnetScopes.
NoteIf you have any spaces between the entries in the list of sources or any other invalid characters, the scope is ignored and the setting behaves as if it were disabled. please double-check your scope syntax before saving changes.
Host names, DNS names, or DNS suffixes are not supported.
Disabled
Remote Administration is not allowed. windows Firewall blocks port 135 and does not open 445. also, in effect, it adds SVCHOST. EXE and LSASS. EXE to the program exceptions list with the status of disabled. because disabling this policy setting does not block TCP port 445, it does not conflict withWindows Firewall: Allow file and printer sharing exceptionSetting. This does not prevent these programs from running or their corresponding ports from being opened.
Malicious users and programs often attempt to attack networks and computers using RPC and DCOM traffic. we recommend that you contact the manufacturers of your critical programs to determine if they require RPC and DCOM communication. if they do not, then do not enable this setting.
NoteIf you only want to open a subset of the ports that this setting opens, leave this setting set to not configured and useWindows Firewall: Define Port ExceptionsSetting to selectively open ports. Windows Server Firewall exceptions for remote administration tools
By admin on Limit l 17,200 8
Microsoft has a Web page that lists the various tools you can use to remotely administer a Windows server system. the page lists each remote administration tool and the steps that are required to successfully use the tool with the Windows Firewall Service enabled on the local or remote machine.
Firewall configuration details for the following remote administration tools are provided:
Microsoft also has a guide to Windows Firewall configuration by server role.
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
