Sebastian Gottschalk wrote:
> warf wrote:
>
>> Sebastian Gottschalk wrote:
>>> warf wrote:
>>>
>>>> I have been trying to learn as much as I can about internet 'security'
snip....
> Ehm... now why don't you grap TcpView?

I have It Sebastian, while useful it appears to yield a subsection of
what Spybot S&D 'processtool' coughs up. And S&D lists modules and
process's. etc...

I am reading the win2k manual and it explains the difference between
application 'ports', sockets[winsock] and the various protocals layered
within. I am getting a 'better' picture of the hiearchy.
I am still confused by 'NETBUI'[not NETBIOS, that I understand is simply
a file/print sharing protocal yes?] Even when I have 'SERVER', FILE
PRINT SHARING, REMOTE ACCESS services disabled I still see NETBUI ports
136,137,138,139,445 'listening in TCPVIEW and S&D Processes???
Then enthereal shows NETBUI "name lookup" traffic...is this the DHCP IP
renewal server contacting my cable ISP to register my IP?

I ask becasue in an effort to disable all 'REmote access' I ineveitably
loose DNS Lookup or something that can't be restored short of an OS
REPAIR install...and that gets tiring..."wipe and rebuild"

>> Eastlink is very coy and stingy with 'what services and ports I require'
>
> As a client you don't require any services at al l.

As a Cable modem customer placed directly on the Inet backbone if I
block ALL servers via ZA I loose DNSlookup, autoupdates and I can't
restore it easilly...

Most of the W2K essential services [services.msc] are hard to ascertain
for HTTP internet browsing, pop/smtp and newsgroups...for eg: REMOTE
ACCESS CONNECTION MGR....seems to imply "I am a server" if allowed to
start automaticly....but DHCP fails because NETBUI is innactivated If I
disable it in SERVices.msc

I'll get it someday.
I sure wish that link you sent me was in English as well as German...se
la gar.
Warf.