Each service corresponds to its own port. For example, as everyone knows, the port for WWW service is 80, smtp is 25, ftp is 21; by default, Win2000 installs with all these services enabled. For individual users, there really is no need for them; closing ports just means disabling unnecessary services.
Configure them in "Services" under "Administrative Tools" in the "Control Panel".
1. To close ports 7, 9, etc.: disable Simple TCP/IP Service, which supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day.
2. To close port 80: disable the WWW service. In "Services" its display name is "World Wide Web Publishing Service", which provides Web connections and management through the Internet Information Services snap-in.
3. To close port 25: disable the Simple Mail Transport Protocol (SMTP) service, whose function is to transmit email across networks.
4. To close port 21: disable FTP Publishing Service, which provides FTP connections and management through the Internet Information Services snap-in.
5. To close port 23: disable the Telnet service, which allows remote users to log on to the system and use the command line to run console programs.
6. Another very important one is to disable the server service. This service provides RPC support, file, print, and named-pipe sharing. Turning it off disables Win2k's default shares, such as ipc$, c$, admin$, etc. Disabling this service does not affect your other operations.
7. There is also port 139. Port 139 is the NetBIOS Session port, used for file and printer sharing. Note that Unix machines running samba also open port 139, with the same function. In the past, Liuguang 2000 was not very accurate in using it to determine the other host's type; I guess if port 139 was open it would treat it as an NT machine. Now that's better.
The method for closing port 139 is: in "Network and Dial-up Connections", select "Local Area Connection", then the properties of "Internet Protocol (TCP/IP)", then go into "Advanced TCP/IP Settings" and "WINS", where there is an option "Disable NetBIOS over TCP/IP". Check it and port 139 will be closed.
For individual users, you can set these services to "Disabled" in their properties, so that when you reboot next time the services won't start up again and the ports won't be opened again.
If you want to learn more about ports, please refer to the relevant content on my forum: http://msbbs.9126.com