Port 139 and 445?

[Pythons]

Hello,

 

I've been reading about how the 'recent' major ransomware have been communicating with other computers through the ports 445 and 139 mainly.

I'd rather have protection from these types of attacks in the future (If they somehow find another backdoor), but I'm not sure...

What do these ports actually do, and does it matter if i disable or block them through the firewall?

Regards,

Pythons

[brwainer]

45 minutes ago, Pythons said:

Hello,

 

I've been reading about how the 'recent' major ransomware have been communicating with other computers through the ports 445 and 139 mainly.

I'd rather have protection from these types of attacks in the future (If they somehow find another backdoor), but I'm not sure...

What do these ports actually do, and does it matter if i disable or block them through the firewall?

Regards,

Pythons

Port 139 - primarily NetBios, which is the protocol used by Windows clients to find each other on a LAN - they mainly just exchange their name and such. This is what gets enabled when you are in a Private type network, or if you choose to enable finding computers on a Public type network

https://www.speedguide.net/port.php?port=139

Port 445 - NetBIOS and/or SMB over IP

https://www.speedguide.net/port.php?port=445

 

Basically, if you want to access other computers on the LAN by name, and they aren't in the local DNS server, you need these ports open. And if you want to use SMB transfers, you need 445 open.

[Pythons]

2 minutes ago, brwainer said:

Port 139 - primarily NetBios, which is the protocol used by Windows clients to find each other on a LAN - they mainly just exchange their name and such. This is what gets enabled when you are in a Private type network, or if you choose to enable finding computers on a Public type network

https://www.speedguide.net/port.php?port=139

Port 445 - NetBIOS and/or SMB over IP

https://www.speedguide.net/port.php?port=445

 

Basically, if you want to access other computers on the LAN by name, and they aren't in the local DNS server, you need these ports open. And if you want to use SMB transfers, you need 445 open.

Thanks for your help!