none
How to Block WinCE UPD Port 137 and 138 RRS feed

  • Question

  • Hi ,

    I am newbie to WinCE platform.

    I am using WinCE  device and there is a requirement to block UDP Port 137 & 138.

    Please suggets how can I block these ports?

    Regards,

    Vinod


    Regards, Vinod Shalgar

    Friday, July 20, 2012 7:10 AM

All replies

  • You can include the 'firewall' component in your OS design and add some rules to the registry to block such ports. See http://msdn.microsoft.com/en-us/library/ms898960 and subtopics, expecially http://msdn.microsoft.com/en-us/library/aa450056 for the registry

    Luca Calligaris lucaDOTcalligarisATeurotechDOTcom www.eurotech.com Check my blog: http://lcalligaris.wordpress.com

    Friday, July 20, 2012 11:46 AM
  • Thanks for your reply.

    But I am not able to find HKEY_LOCAL_MACHINE\Comm\Firewall  registry in my WinCE device.


    Regards, Vinod Shalgar

    Friday, July 20, 2012 5:46 PM
  • Are you building the image from a BSP, or do you have a device that already has WinCE loaded?  Do you have any control over what components are present in WinCE?
    Friday, July 20, 2012 7:27 PM
  • Hi,

    I have a device which has already WinCE loaded. I do not have any control over it apart from playing with registry values.


    Regards, Vinod Shalgar

    Saturday, July 21, 2012 7:43 AM
  • In that case the kernel running on the device does not include the firewall component. The easiest way forward is to ask the device manufacturer to supply you with a kernel that does include the firewall so you can configure it.

    Good luck,

    Michel Verhagen, eMVP
    Check out my blog: http://guruce.com/blog

    GuruCE
    Microsoft Embedded Partner
    http://guruce.com
    Consultancy, training and development services.

    Sunday, July 22, 2012 9:31 PM
    Moderator
  • Instead of hiding a not desired service with a firewall it would be nice to disable or remove the component that has offered the service.

    Is it possible to avoid starting of the service that listens on the ports when th Platform Builder is available?


    • Edited by Harper23 Friday, August 10, 2012 7:03 AM
    Tuesday, July 24, 2012 12:27 PM
  • Any idea which WinCE service is opening these UDP ports? so I can go ahead and stop those services, I am able to close FTP port 21 by unregistering FTP service on the device.


    Regards, Vinod Shalgar

    Thursday, July 26, 2012 11:45 AM
  • A quick search for those port number on Google suggests that they are both NetBIOS.

    IIRC, the logic for NetBIOS does not allow for the service to be shut down if it is included in the OS.


    Bruce Eitman (eMVP)
    Senior Engineer
    Bruce.Eitman AT Eurotech DOT com
    My BLOG http://geekswithblogs.net/bruceeitman

    Eurotech Inc.
    www.Eurotech.com

    Thursday, July 26, 2012 3:35 PM
    Moderator