port 135? after format

[fred22]

hey guys, i formatted the drive.. installed xp SP2 as usuall:

closed all required ports
wwdc
shootthemessenger
bugoff



scanning on GRC shows me stealth on all ports:
135
Stealth dcom-scm
DCOM Service Control Manager

disabled DCOM,Task Sheduler,Distributed Transaction Coordinator etc..

im using Phantom's ruleset v6 and each restart i see lots of blocked TCP incomming connections on port 135 .most come from:

versatel.be/nl
my isp
interbusiness
rima-tde net
etc..

i've never seen them bfore only after this format

any feedback on this would be great :)

[Frederic]

Hi fred22,

Perhaps with your previous installation, these packets were simply dropped silently (if the ! was not set for that rule) ?

Frederic

[fred22]

hey Frederic.. its the same setup and by default the rule: TCPBlock incomming connections have the "!" ticked right?!

its nothing to worry about afterall?

thx for wasting ur time on me ;)

[Frederic]

Yes, normally this kind of rule has the ! ticked by default.

If GRC is saying you are stealth, and if Look 'n' Stop is explicity blocking incoming packets on port 135, no, there is nothing to worry about.

Frederic