控制端口用系統自帶的防火牆就可以了啊,或者用第三方工具也可以，比如 ice sword 。
下面是端口以及端口作用的列表
TCP 1=TCP Port Service Multiplexer
TCP 2=Death
TCP 5=Remote Job Entry，yoyo
TCP 7=Echo
TCP 11=Skun
TCP 12=Bomber
TCP 16=Skun
TCP 17=Skun
TCP 18=消息傳輸協議，skun
TCP 19=Skun
TCP 20=FTP Data，Amanda
TCP 21=文件傳輸
TCP 22=遠程登錄協議
TCP 23=遠程登錄(Telnet)，Tiny Telnet Server (= TTS)
TCP 25=電子郵件(SMTP)，Ajan，Antigen，Email Password Sender，Happy，99，Kuang2，ProMail，trojan，Shtrilitz，Stealth，Tapiras，Terminator，WinPC，WinSpy，Haebu Coceda
TCP 27=Assasin
TCP 28=Amanda
TCP 29=MSG ICP
TCP 30=Agent 40421
TCP 31=Agent 31，Hackers Paradise，Masters Paradise，Agent 40421
TCP 37=Time，ADM worm
TCP 39=SubSARI
TCP 41=DeepThroat，Foreplay
TCP 42=Host Name Server
TCP 43=WHOIS
TCP 44=Arctic
TCP 48=DRAT
TCP 49=主機登錄協議
TCP 50=DRAT
TCP 51=Fuck Lamers Backdoor
TCP 52=MuSka52，Skun
TCP 53=DNS，Bonk (DOS Exploit)
TCP 54=MuSka52
TCP 58=DMSetup
TCP 59=DMSetup
TCP 66=AL-Bareki
TCP 69=W32.Evala.Worm，BackGate Kit，Nimda，Pasana，Storm，Storm worm，Theef
TCP 70=Gopher服務，ADM worm
TCP 79=用戶查詢(Finger)，Firehotcker，ADM worm
TCP 80=超文本服務器(Http)，Executor，RingZero
TCP 81=Chubo
TCP 99=Hidden Port
TCP 108=SNA網關訪問服務器
TCP 109=Pop2
TCP 110=電子郵件(Pop3)，ProMail
TCP 113=Kazimas， Auther Idnet
TCP 115=簡單文件傳輸協議
TCP 118=SQL Services， Infector 1.4.2
TCP 119=Newsgroup(Nntp)， Happy 99
TCP 121=JammerKiller， Bo jammerkillah
TCP 129=Password Generator Protocol
TCP 123=Net Controller
TCP 133=Infector 1.x
TCP 135=Netbios Remote procedure call
TCP 137=Netbios name (DoS attacks)
TCP 138=Netbios datagram
TCP 139=Netbios session (DoS attacks)
TCP 143=IMAP
TCP 146=FC Infector，Infector
TCP 150=NetBIOS Session Service
TCP 156=SQL服務器
TCP 161=Snmp
TCP 162=Snmp-Trap
TCP 170=A-Trojan
TCP 179=Border網關協議(BGP)
TCP 190=網關訪問控制協議(GACP)
TCP 194=Irc
TCP 197=目錄定位服務(DLS)
TCP 256=Nirvana
TCP 315=The Invasor
TCP 389=Lightweight Directory Access Protocol (LDAP)
TCP 396=Novell Netware over IP
TCP 420=Breach
TCP 421=TCP Wrappers
TCP 443=安全服務
TCP 444=Simple Network Paging Protocol(SNPP)
TCP 445=Microsoft-DS
TCP 456=Hackers paradise，FuseSpark
TCP 458=蘋果公司QuickTime
TCP 531=Rasmin
TCP 546=DHCP Client
TCP 547=DHCP Server
TCP 555=Ini-Killer，Phase Zero，Stealth Spy
TCP 569=MSN
TCP 605=SecretService
TCP 606=Noknok8
TCP 661=Noknok8
TCP 666=Attack FTP，Satanz Backdoor，Back Construction，Dark Connection Inside 1.2
TCP 667=Noknok7.2
TCP 668=Noknok6
TCP 692=GayOL
TCP 777=AIM Spy
TCP 808=RemoteControl，WinHole
TCP 815=Everyone Darling
TCP 901=Backdoor.Devil
TCP 911=Dark Shadow
TCP 999=DeepThroat
TCP 1000=Der Spaeher
TCP 1001=Silencer，WebEx，Der Spaeher
TCP 1003=BackDoor
TCP 1010=Doly
TCP 1011=Doly
TCP 1012=Doly
TCP 1015=Doly
TCP 1020=Vampire
TCP 1024=NetSpy.698(YAI)
TCP 1025=NetSpy.698
TCP 1033=Netspy
TCP 1042=Bla
TCP 1045=Rasmin
TCP 1047=GateCrasher
TCP 1050=MiniCommand
TCP 1080=Wingate， Worm.BugBear.B
TCP 1090=Xtreme， VDOLive
TCP 1095=Rat
TCP 1097=Rat
TCP 1098=Rat
TCP 1099=Rat
TCP 1111=Backdoor.AIMVision
TCP 1170=Psyber Stream Server，Streaming Audio trojan，Voice
TCP 1200=NoBackO
TCP 1201=NoBackO
TCP 1207=Softwar
TCP 1212=Nirvana，Visul Killer
TCP 1234=Ultors
TCP 1243=BackDoor-G， SubSeven， SubSeven Apocalypse
TCP 1245=VooDoo Doll
TCP 1269=Mavericks Matrix
TCP 1313=Nirvana
TCP 1349=BioNet
TCP 1441=Remote Storm
TCP 1492=FTP99CMP(BackOriffice.FTP)
TCP 1509=Psyber Streaming Server
TCP 1600=Shivka-Burka
TCP 1703=Exloiter 1.1
TCP 1807=SpySender
TCP 1966=Fake FTP 2000
TCP 1976=Custom port
TCP 1981=Shockrave
TCP 1999=BackDoor， TransScout
TCP 2000=Der Spaeher，INsane Network
TCP 2001=Transmisson scout
TCP 2002=Transmisson scout
TCP 2003=Transmisson scout
TCP 2004=Transmisson scout
TCP 2005=TTransmisson scout
TCP 2023=Ripper，Pass Ripper，Hack City Ripper Pro
TCP 2115=Bugs
TCP 2121=Nirvana
TCP 2140=Deep Throat， The Invasor
TCP 2155=Nirvana
TCP 2208=RuX
TCP 2255=Illusion Mailer
TCP 2283=HVL Rat5
TCP 2300=PC Explorer
TCP 2311=Studio54
TCP 2565=Striker
TCP 2583=WinCrash
TCP 2600=Digital RootBeer
TCP 2716=Prayer Trojan
TCP 2801=Phineas Phucker
TCP 2989=Rat
TCP 3024=WinCrash trojan
TCP 3128=RingZero
TCP 3129=Masters Paradise
TCP 3150=Deep Throat， The Invasor
TCP 3210=SchoolBus
TCP 3389=RemoteControl
TCP 3456=Terror
TCP 3459=Eclipse 2000
TCP 3700=Portal of Doom
TCP 3791=Eclypse
TCP 3801=Eclypse
TCP 4000=騰訊QQ客戶端
TCP 4092=WinCrash
TCP 4242=VHM
TCP 4321=BoBo
TCP 4444=Prosiakft remote
TCP 4500=W32.HLLW.Tufas
TCP 4567=File Nail
TCP 4590=ICQTrojan
TCP 4950=ICQTrojan
TCP 4899=RA
TCP 5000=WindowsXP服務器，Blazer 5，Bubbel，Back Door Setup，Sockets de Troie
TCP 5001=Back Door Setup， Sockets de Troie
TCP 5011=One of the Last Trojans (OOTLT)
TCP 5031=Firehotcker，Metropolitan，NetMetro
TCP 5032=Metropolitan
TCP 5190=ICQ Query
TCP 5321=Firehotcker
TCP 5333=Backage Trojan Box 3
TCP 5343=WCrat
TCP 5400=Blade Runner， BackConstruction1.2
TCP 5401=Blade Runner，Back Construction
TCP 5402=Blade Runner，Back Construction
TCP 5471=WinCrash
TCP 5521=Illusion Mailer
TCP 5550=Xtcp，INsane Network
TCP 5555=ServeMe
TCP 5556=BO Facil
TCP 5557=BO Facil
TCP 5569=Robo-Hack
TCP 5598=BackDoor 2.03
TCP 5631=PCAnyWhere data
TCP 5637=PC Crasher
TCP 5638=PC Crasher
TCP 5698=BackDoor
TCP 5714=Wincrash3
TCP 5741=WinCrash3
TCP 5742=WinCrash
TCP 5881=Y3K RAT
TCP 5882=Y3K RAT
TCP 5888=Y3K RAT
TCP 5889=Y3K RAT
TCP 5900=WinVnc，華訊VGA廣播服務器
TCP 6000=Backdoor.AB
TCP 6006=Noknok8
TCP 6272=SecretService
TCP 6267=廣外女生
TCP 6400=Backdoor.AB，The Thing
TCP 6500=Devil 1.03
TCP 6661=Teman
TCP 6666=TCPshell.c
TCP 6667=NT Remote Control，華訊視頻接收端口
TCP 6668=華訊視頻廣播服務器
TCP 6669=Vampyre
TCP 6670=DeepThroat
TCP 6711=SubSeven
TCP 6712=SubSeven1.x
TCP 6713=SubSeven
TCP 6723=Mstream
TCP 6767=NT Remote Control
TCP 6771=DeepThroat
TCP 6776=BackDoor-G，SubSeven，2000 Cracks
TCP 6789=Doly Trojan
TCP 6838=Mstream
TCP 6883=DeltaSource
TCP 6912=Shit Heep
TCP 6939=Indoctrination
TCP 6969=GateCrasher， Priority， IRC 3
TCP 6970=GateCrasher
TCP 7000=Remote Grab，NetMonitor，SubSeven1.x
TCP 7001=Freak88
TCP 7201=NetMonitor
TCP 7215=BackDoor-G， SubSeven
TCP 7001=Freak88，Freak2k
TCP 7300=NetMonitor
TCP 7301=NetMonitor
TCP 7306=NetMonitor
TCP 7307=NetMonitor， ProcSpy
TCP 7308=NetMonitor， X Spy
TCP 7323=Sygate服務器端
TCP 7424=Host Control
TCP 7597=Qaz
TCP 7609=Snid X2
TCP 7626=冰河
TCP 7777=The Thing
TCP 7789=Back Door Setup， ICQKiller
TCP 7983=Mstream
TCP 8000=XDMA， 騰訊OICQ服務器端
TCP 8010=Logfile
TCP 8080=WWW 代理，Ring Zero，Chubo
TCP 8520=W32.Socay.Worm
TCP 8787=BackOfrice 2000
TCP 8897=Hack Office，Armageddon
TCP 8989=Recon
TCP 9000=Netministrator
TCP 9325=Mstream
TCP 9400=InCommand
TCP 9401=InCommand
TCP 9402=InCommand
TCP 9872=Portal of Doom
TCP 9873=Portal of Doom
TCP 9874=Portal of Doom
TCP 9875=Portal of Doom
TCP 9876=Cyber Attacker
TCP 9878=TransScout
TCP 9989=Ini-Killer
TCP 9999=Prayer Trojan
TCP 10067=Portal of Doom
TCP 10084=Syphillis
TCP 10085=Syphillis
TCP 10086=Syphillis
TCP 10101=BrainSpy
TCP 10167=Portal Of Doom
TCP 10168=Worm.Supnot.78858.c
TCP 10520=Acid Shivers
TCP 10607=Coma trojan
TCP 10666=Ambush
TCP 11000=Senna Spy
TCP 11050=Host Control
TCP 11051=Host Control
TCP 11223=Progenic，Hack /'99KeyLogger
TCP 11831=TROJ_LATINUS.SVR
TCP 12076=Gjamer， MSH.104b
TCP 12223=Hack?9 KeyLogger
TCP 12345=GabanBus， NetBus， Pie Bill Gates， X-bill
TCP 12346=GabanBus， NetBus， X-bill
TCP 12349=BioNet
TCP 12361=Whack-a-mole
TCP 12362=Whack-a-mole
TCP 12378=W32/Gibe@MM
TCP 12456=NetBus
TCP 12623=DUN Control
TCP 12624=Buttman
TCP 12631=WhackJob， WhackJob.NB1.7
TCP 12701=Eclipse2000
TCP 12754=Mstream
TCP 13000=Senna Spy
TCP 13010=Hacker Brazil
TCP 13013=Psychward
TCP 13700=Kuang2 The Virus
TCP 14456=Solero
TCP 14500=PC Invader
TCP 14501=PC Invader
TCP 14502=PC Invader
TCP 14503=PC Invader
TCP 15000=NetDaemon 1.0
TCP 15092=Host Control
TCP 15104=Mstream
TCP 16484=Mosucker
TCP 16660=Stacheldraht (DDoS)
TCP 16772=ICQ Revenge
TCP 16969=Priority
TCP 17166=Mosaic
TCP 17300=Kuang2 The Virus
TCP 17490=CrazyNet
TCP 17500=CrazyNet
TCP 17569=Infector 1.4.x + 1.6.x
TCP 17777=Nephron
TCP 18753=Shaft (DDoS)
TCP 19864=ICQ Revenge
TCP 20000=Millennium II (GrilFriend)
TCP 20001=Millennium II (GrilFriend)
TCP 20002=AcidkoR
TCP 20034=NetBus 2 Pro
TCP 20203=Logged，Chupacabra
TCP 20331=Bla
TCP 20432=Shaft (DDoS)
TCP 21544=Schwindler 1.82，GirlFriend
TCP 21554=Schwindler 1.82，GirlFriend，Exloiter 1.0.1.2
TCP 22222=Prosiak，RuX Uploader 2.0
TCP 22784=Backdoor.Intruzzo
TCP 23432=Asylum 0.1.3
TCP 23456=Evil FTP， Ugly FTP， WhackJob
TCP 23476=Donald Dick
TCP 23477=Donald Dick
TCP 23777=INet Spy
TCP 26274=Delta
TCP 26681=Spy Voice
TCP 27374=Sub Seven 2.0+， Backdoor.Baste
TCP 27444=Tribal Flood Network，Trinoo
TCP 27665=Tribal Flood Network，Trinoo
TCP 29431=Hack Attack
TCP 29432=Hack Attack
TCP 29104=Host Control
TCP 29559=TROJ_LATINUS.SVR
TCP 29891=The Unexplained
TCP 30001=Terr0r32
TCP 30003=Death，Lamers Death
TCP 30029=AOL trojan
TCP 30100=NetSphere 1.27a，NetSphere 1.31
TCP 30101=NetSphere 1.31，NetSphere 1.27a
TCP 30102=NetSphere 1.27a，NetSphere 1.31
TCP 30103=NetSphere 1.31
TCP NetSphere Final
TCP 30303=Sockets de Troie
TCP 30947=Intruse
TCP 30999=Kuang2
TCP 21335=Tribal Flood Network，Trinoo
TCP 31336=Bo Whack
TCP 31337=Baron Night，BO client，BO2，Bo Facil，BackFire，Back Orifice，DeepBO，Freak2k，NetSpy
TCP 31338=NetSpy，Back Orifice，DeepBO
TCP 31339=NetSpy DK
TCP 31554=Schwindler
TCP 31666=BOWhack
TCP 31778=Hack Attack
TCP 31785=Hack Attack
TCP 31787=Hack Attack
TCP 31789=Hack Attack
TCP 31791=Hack Attack
TCP 31792=Hack Attack
TCP 32100=PeanutBrittle
TCP 32418=Acid Battery
TCP 33333=Prosiak，Blakharaz 1.0
TCP 33577=Son Of Psychward
TCP 33777=Son Of Psychward
TCP 33911=Spirit 2001a
TCP 34324=BigGluck，TN，Tiny Telnet Server
TCP 34555=Trin00 (Windows) (DDoS)
TCP 35555=Trin00 (Windows) (DDoS)
TCP 36794=Worm.Bugbear-A
TCP 37651=YAT
TCP 40412=The Spy
TCP 40421=Agent 40421，Masters Paradise.96
TCP 40422=Masters Paradise
TCP 40423=Masters Paradise.97
TCP 40425=Masters Paradise
TCP 40426=Masters Paradise 3.x
TCP 41666=Remote Boot
TCP 43210=Schoolbus 1.6/2.0
TCP 44444=Delta Source
TCP 47252=Prosiak
TCP 47262=Delta
TCP 47878=BirdSpy2
TCP 49301=Online Keylogger
TCP 50505=Sockets de Troie
TCP 50766=Fore， Schwindler
TCP 51966=CafeIni
TCP 53001=Remote Windows Shutdown
TCP 53217=Acid Battery 2000
TCP 54283=Back Door-G， Sub7
TCP 54320=Back Orifice 2000，Sheep
TCP 54321=School Bus .69-1.11，Sheep， BO2K
TCP 57341=NetRaider
TCP 58008=BackDoor.Tron
TCP 58009=BackDoor.Tron
TCP 58339=ButtFunnel
TCP 59211=BackDoor.DuckToy
TCP 60000=Deep Throat
TCP 60068=Xzip 6000068
TCP 60411=Connection
TCP 60606=TROJ_BCKDOR.G2.A
TCP 61466=Telecommando
TCP 61603=Bunker-kill
TCP 63485=Bunker-kill
TCP 65000=Devil， DDoS
TCP 65432=Th3tr41t0r， The Traitor
TCP 65530=TROJ_WINMITE.10
TCP 65535=RC，Adore Worm/Linux
UDP 1=Sockets des Troie
UDP 9=Chargen
UDP 19=Chargen
UDP 69=Pasana
UDP 80=Penrox
UDP 135=Netbios Remote procedure call
UDP 139=Netbios session (DoS attacks)
UDP 146=Infector
UDP 1025=Maverick/'s Matrix 1.2 - 2.0
UDP 1026=Remote Explorer 2000
UDP 1027=Trojan.Huigezi.e
UDP 1028=KiLo，SubSARI
UDP 1029=SubSARI
UDP 1031=Xot
UDP 1032=Akosch4
UDP 1104=RexxRave
UDP 1111=Daodan
UDP 1116=Lurker
UDP 1122=Last 2000，Singularity
UDP 1183=Cyn，SweetHeart
UDP 1200=NoBackO
UDP 1201=NoBackO
UDP 1342=BLA trojan
UDP 1344=Ptakks
UDP 1349=BO dll
UDP 1561=MuSka52
UDP 1772=NetControle
UDP 1978=Slapper
UDP 1985=Black Diver
UDP 2000=A-trojan，Fear，Force，GOTHIC Intruder，Last 2000，Real 2000
UDP 2001=Scalper
UDP 2002=Slapper
UDP 2130=Mini BackLash
UDP 2140=Deep Throat，Foreplay，The Invasor
UDP 2222=SweetHeart， Way
UDP 2339=Voice Spy
UDP 2702=Black Diver
UDP 2989=RAT
UDP 3150=Deep Throat
UDP 3215=XHX
UDP 3333=Daodan
UDP 3801=Eclypse
UDP 3996=Remote Anything
UDP 4128=RedShad
UDP 4156=Slapper
UDP 5419=DarkSky
UDP 5503=Remote Shell Trojan
UDP 5555=Daodan
UDP 5882=Y3K RAT
UDP 5888=Y3K RAT
UDP 6112=Battle.net Game
UDP 6666=KiLo
UDP 6667=KiLo
UDP 6766=KiLo
UDP 6767=KiLo，UandMe
UDP 6838=Mstream Agent-handler
UDP 7028=未知木馬
UDP 7424=Host Control
UDP 7788=Singularity
UDP 7983=MStream handler-agent
UDP 8012=Ptakks
UDP 8090=Aphex/'s Remote Packet Sniffer
UDP 8127=9_119，Chonker
UDP 8488=KiLo
UDP 8489=KiLo
UDP 8787=BackOrifice 2000
UDP 8879=BackOrifice 2000
UDP 9325=MStream Agent-handler
UDP 10000=XHX
UDP 10067=Portal of Doom
UDP 10084=Syphillis
UDP 10100=Slapper
UDP 10167=Portal of Doom
UDP 10498=Mstream
UDP 10666=Ambush
UDP 11225=Cyn
UDP 12321=Protoss
UDP 12345=BlueIce 2000
UDP 12378=W32/Gibe@MM
UDP 12623=ButtMan，DUN Control
UDP 15210=UDP remote shell backdoor server
UDP 15486=KiLo
UDP 16514=KiLo
UDP 16515=KiLo
UDP 18753=Shaft handler to Agent
UDP 20433=Shaft
UDP 21554=GirlFriend
UDP 22784=Backdoor.Intruzzo
UDP 23476=Donald Dick
UDP 25123=MOTD
UDP 26274=Delta Source
UDP 26374=Sub-7 2.1
UDP 26444=Trin00/TFN2K
UDP 26573=Sub-7 2.1
UDP 27184=Alvgus trojan 2000
UDP 27444=Trinoo
UDP 29589=KiLo
UDP 29891=The Unexplained
UDP 30103=NetSphere
UDP 31320=Little Witch
UDP 31335=Trin00 DoS Attack
UDP 31337=Baron Night， BO client， BO2， Bo Facil， BackFire， Back Orifice， DeepBO
UDP 31338=Back Orifice， NetSpy DK， DeepBO
UDP 31339=Little Witch
UDP 31340=Little Witch
UDP 31416=Lithium
UDP 31787=Hack aTack
UDP 31789=Hack aTack
UDP 31790=Hack aTack
UDP 31791=Hack aTack
UDP 33390=未知木馬
UDP 34555=Trinoo
UDP 35555=Trinoo
UDP 43720=KiLo
UDP 44014=Iani
UDP 44767=School Bus
UDP 46666=Taskman
UDP 47262=Delta Source
UDP 47785=KiLo
UDP 49301=OnLine keyLogger
UDP 49683=Fenster
UDP 49698=KiLo
UDP 52901=Omega
UDP 54320=Back Orifice
UDP 54321=Back Orifice 2000
UDP 54341=NetRaider Trojan
UDP 61746=KiLO
UDP 61747=KiLO
UDP 61748=KiLO
UDP 65432=The Traitor
每一項服務都對應相應的端口，比如衆如周知的WWW服務的端口是80，smtp是25，ftp是21，win2000安裝中默認的都是這些服務開啓的。對於個人用戶來說確實沒有必要，關掉端口也就是關閉無用的服務。
“控制面板”的“管理工具”中的“服務”中來配置。
1、關閉7.9等等端口：關閉Simple TCP/IP Service,支持以下TCP/IP服務：Character Generator,Daytime, Discard, Echo, 以及 Quote of the Day。
2、關閉80口：關掉WWW服務。在“服務”中顯示名稱爲"World Wide Web Publishing Service"，通過 Internet 信息服務的管理單元提供 Web 連接和管理。
3、關掉25端口：關閉Simple Mail Transport Protocol (SMTP)服務，它提供的功能是跨網傳送電子郵件。
4、關掉21端口：關閉FTP Publishing Service,它提供的服務是通過 Internet 信息服務的管理單元提供 FTP 連接和管理。
5、關掉23端口：關閉Telnet服務，它允許遠程用戶登錄到系統並且使用命令行運行控制檯程序。
6、還有一個很重要的就是關閉server服務，此服務提供RPC支持、文件、打印以及命名管道共享。關掉它就關掉了win2k的默認共享，比如ipc$、c$、admin$等等，此服務關閉不影響您的其他操作。
7、還有一個就是139端口，139端口是NetBIOS>>Session端口，用來文件和打印共享，注意的是運行samba的unix機器也開放了139端口，功能一樣。以前流光2000用來判斷對方主機類型不太準確，估計就是139端口開放既認爲是NT機，現在好了。
關閉139口聽方法是在“網絡和撥號連接”中“本地連接”中選?gt;>癐nternet協議(TCP/IP)”屬性，進入“高級TCP/IP設置”“WINS設置”裏面有一項“禁用TCP/IP的NETBIOS”，打勾就關閉了139端口。
對於個人用戶來說，可以在各項服務屬性設置中設爲“禁用”，以免下次重啓服務也重新啓動，端口也開放了。
--------------------------------------------------------------------------------
也可以用防火牆關閉端口.
--------------------------------------------------------------------------------
網絡鄰居（屬性）-所建立的連接（屬性）-internet協議（屬性）-常規（高級）-選項-TCP/IP篩選（屬性）裏可以進行端口設置.