Re: Disable Netbios thru Registry for Windows 2K/XP

["Jude Naidoo" <jude007 () jnaidoo fsnet co uk>]

Hi

Windows needs rpc and microsoft-ds open to communicate with the pdc, shared
drives, etc.. You can go into the tcp filters on XP and Win2k and limit or
block connectivity via these ports for both tcp and udp.
If you have a network of clean hosts, wouldn't it be better to block these
ports at the border routers ??

Jude



----- Original Message ----- 
From: "Koh Keng Leng" <KOH_Keng_Leng () dsi a-star edu sg>
To: <security-basics () securityfocus com>
Sent: Friday, September 05, 2003 12:16 PM
Subject: Disable Netbios thru Registry for Windows 2K/XP


> hi all,
>
> Wonder if there is any way to disable netbios thru registry for Windows
> 2K/XP? especially ports 135 and 445. Thanks in advance for any inputs.
>
> regards,
> Keng Leng
>
> --------------------------------------------------------------------------
-
> Attend Black Hat Briefings & Training Federal, September 29-30 (Training),
> October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> technical IT security event.  Modeled after the famous Black Hat event in
> Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
> --------------------------------------------------------------------------
--
>



---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------