Subscriber M.Y. Choy wrote to ask:
Hi Terry, TQ for yr excellent Newsletter.
Could U advise me how to close port 515?
My computer has AV & firewall running. I have also use Steve Gibson’s Shoot the messenger, UnPlug n” Pray & Socketlock to protect my computer.
However, when I use online Shield Up! to scan my computer,all ports are closed/stealth except the port 515 is permanently opened! Was advised that this is the printer port and Trojan Sightings: lpdw0rm, Ramen. Shield Up only scan service ports, how could it find trojans? Then I ran Trend Micro online scan but found nothing.
I Google around, cannot find helpful info to close this port.
Microsoft info base said printer using LPR protocol uses TCP port 515, which is, by default, blocked by XP SP2 firewall. Since I have never made any exception in the Xp firewall setting, why mine XPSP2 firewall did not block port 515 by default?
I wonder whether other readers have this experience.
Thank you & regards.
You don’t really “close the port,” you stop whatever is keeping a port open; that is, some program is listening for activity on that port and you need to either stop the program, recognize the program is ok and let it listen, or reconfigure the program not to listen. The best way to do the last is to use a two-way firewall.
First, I recommend that you immediately install a two-way firewall. Then, turn off the XP SP2 firewall.