How to re-stealth all ports in Windows Firewall

Guys another noob question by me...
I know windows firewall by default stealths all the ports. But today after uninstalling Fortinet Firewall and re-enabling Windows firewall I found that Ports 135 and 445 is open. I tried these
1) restored windows firewall settings.
2) Removed all the inbound and outbound rules in Windows firewall.
But none helped...
Please help guyzz...

 

You aren't behind a router, by any chance? If you are, it's the router ports that show up in a port scan.

 

No I am not behind that. I am using direct connection. Previously before using Forticlient port scan in windows firewall showed all ports were stealth...

 

HI strapp, thanks for the software. I run the program and disabled those services but the ports are still shown to be open... btw, is there any bad effects in disabling those services?

 

sg09 what version of windows are you using?

 

Hi, I am using Windows 7 Home Basic 32bit..

 

Hi,

Make sure you have set your connection to "Public profile"

Then:-

Check for any firewall exceptions.
Open:- Control panel-> System and security->
next to the "Windows firewall" icon, you will see "Allow a program through windows firewall", click on that and check what is being allowed inbound.


- Stem

 

@stapp, thanks for the link, I am going to install nmap and going to scan the ports.

@stem, thanks for your reply.. Public profile is selected..
There are many things,
1) Core Networking.
2) Lots of Forticlient proxy service.
3) Lots of Forticlient VPN service.
4) Lots of Forticlient WAN optimization service.
5) Free Download Manager (I download torrents using this)
6) Network Discovery. (not public)
7) Remote Assistance. (not public)

 

Here is the complete list of inbound rules...


View attachment inbound.txt

 

What a mess

You should remove all the rules that have been created by the "Fortinet Firewall" installation, and if those exceptions are (which they look like) from the Fortinet firewall installation, then you need to disable/remove those.


- Stem

 

Its really a mess.. I was shocked seeing so many inbound rules... I have already removed the firewall part of the suite. I think I need to remove the rest as well...

 

I would suggest un-installing it all.
Download the trial version of Revo-uninstaller http://www.revouninstaller.com/ and use that to force uninstall that suite.
You can then clean out all those firewall rules/exceptions.


- Stem

 

Thanks stem I am confirmed. I disabled the suite and then removed all the inbound rules and then port scan showed all ports are stealth. So, I am going to uninstall the culprit... Thanks for all your help...

 

Good to hear the problem is now resolved.


Take care,


- Stem