UDP or TCP ports 135-139?

RouterOS General
1

I use firewall rule:

add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm"

and this rule blocks these ports almost of every my client. I am affraid of not to block any service needed by my clients. What are that ports needed for? Is better to block them or allow them. Or block almost every client means that almost everybody is infected by messenger worm?

2

Usually used for NetBIOS stuff , it is better to block them .

3

Yes, if they want to do this windows networking stuff over the Internet, it should be done with an encrypted VPN. If you see those ports, you can safely block it.

4

Thanks for your help.