Hurricane Electric's IPv6 Tunnel Broker Forums

Advanced search  

News:

Welcome to Hurricane Electric's Tunnelbroker.net forums!

Author Topic: IPv6 portscan  (Read 1989 times)

deisenst

  • Newbie
  • *
  • Posts: 2
IPv6 portscan
« on: August 03, 2015, 11:56:52 PM »

Hi folks,
I tried doing an IPv6 portscan from the tunnelbroker.net webpage, and it showed:
PORT      STATE    SERVICE
445/tcp   open     microsoft-ds

Does this mean that my port 445 on my Windows machine is visible to the entire IPv6 Internet?

Thanks.    --David Eisenstein
Logged

evantkh

  • Full Member
  • ***
  • Posts: 122
Re: IPv6 portscan
« Reply #1 on: August 04, 2015, 02:55:59 AM »

Yes. I think you may want to use an IPv6 firewall like ip6tables.
Logged

kriteknetworks

  • Sr. Member
  • ****
  • Posts: 261
    • aRDy Music
Re: IPv6 portscan
« Reply #2 on: August 04, 2015, 04:41:06 AM »

Yes, its open to the world. Ensure the machine has a firewall running on it.
Logged

deisenst

  • Newbie
  • *
  • Posts: 2
Re: IPv6 portscan
« Reply #3 on: August 04, 2015, 05:30:16 AM »

Thank you.  I was using an old version of Zonealarm.  Removed it and enabled Windows Firewall and that port (and others) are no longer visible to the IPv6 portscan.
Logged

hammy559

  • Newbie
  • *
  • Posts: 1
Re: IPv6 portscan
« Reply #4 on: September 03, 2015, 12:32:34 AM »

To keep your network free and clear of outside traffic trying to access windows services, I recommend you block ports 445, 137-139 in the FORWARD-ing rules on your edge router if possible.  By adding those ports to that table, any outside SMB connections to your internal ipv6 network will fail.  This will protect you from the outside if you put up another Windows machine and forget to enable the firewall.
Logged