RE: Vista patch breaks forwarding of port 445?

From: Welsh, Armand <Armand.Welsh_at_**********.***>
Date: Fri Dec 14 2007 - 10:53:49 EST

After applying the patches, check that the patch did not bind the
microsoft client service to the loopback adapter. If it did, then you
won't be able to bind to port 445, because the microsoft networking
client service is already listening on the port. When creating a
loopback interface to use only this type of purpose, you should disable
(or remove) all services, leaving only the TCP/IP protocol, and nothing
else. This will ensure you have a wide open interface, ready for 3rd
party software bindings.
 
Armand

________________________________

From: ssh@erdelynet.com [mailto:ssh@erdelynet.com] On Behalf Of Mike
Sent: Friday, December 14, 2007 6:49 AM
To: ssh@erdelynet.com
Subject: Vista patch breaks forwarding of port 445?

Yesterday I installed the latest set of Vista patches from Microsoft
Update. I also made a few other changes, like turning off User Account
Control. Immediately before this I was able to forward port 445 using
"ssh -L 10.0.0.222:445:localhost:445 user@server" where 10.0.0.222 is a
loopback adapter in Windows. After installing the patches I got an
error message saying port 445 could not be forwarded. So I used Windows
Restore to rollback the patches and everything worked correctly again.
Looking through the patches I'd just installed I found this one
addressing a SMB vulnerability:
http://www.microsoft.com/technet/security/bulletin/ms07-063.mspx

I'm guessing it was this one that screwed up the port forwarding. Has
anyone else ran into this issue?

________________________________

Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
it now.
<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i6
2sR8HDtDypao8Wcj9tAcJ>

--
List Info:      http://erdelynet.com/ssh-l/
List Archives:  http://erdelynet.com/archive/ssh-l/
To Unsubscribe: Mail mailto:ssh+unsubscribe@erdelynet.com
Received on Fri Dec 14 11:41:49 2007

This archive was generated by hypermail 2.1.8 : Fri Dec 14 2007 - 11:41:50 EST