RE: To eliminate all netbios traffic without affecting "Server" service

["Victor.Kalu () usdoj gov" <Victor.Kalu () usdoj gov>]

What are you doing about port 135 and 138?  These are also NetBIOS and include the most vulnerable, port 135.

Victor Kalu
victor.kalu () usdoj gov

-----Original Message-----
From: ghe () slsware com [mailto:ghe () slsware com]
Sent: Thursday, July 31, 2003 1:05 PM
To: security-basics () securityfocus com
Subject: Re: To eliminate all netbios traffic without affecting "Server"
service
Importance: Low


On Wed, 2003-07-30 at 19:02, Otto.Lee () reuters com wrote:

> Is there any method to eliminate all the netbios traffic, and, at the same time, the machine can still share 
> resources and map drive?

I've set my firewall to simply ignore traffic to ports 137 and 139. That
seems to work with a Cisco PIX, and with the Linux ipchains packet
filter I was using before that.

-- 
Glenn English
ghe () slsware com


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------