RE: Disable Netbios thru Registry for Windows 2K/XP

["dave kleiman" <dave () netmedic net>]

HKLM\System\CurrentControlSet\Services\NetBT\Parameters\Interfaces\Tcpip_{Ad
apterID}\NetbiosOptions


 
_____________________
Dave Kleiman
dave () netmedic net
www.netmedic.net

"High achievement always takes place in the framework of high expectation."
Jack Kinder

 



-----Original Message-----
From: Jude Naidoo [mailto:jude007 () jnaidoo fsnet co uk] 
Sent: Friday, September 05, 2003 17:32
To: Koh Keng Leng; security-basics () securityfocus com
Subject: Re: Disable Netbios thru Registry for Windows 2K/XP


Hi

Windows needs rpc and microsoft-ds open to communicate with the pdc, shared
drives, etc.. You can go into the tcp filters on XP and Win2k and limit or
block connectivity via these ports for both tcp and udp. If you have a
network of clean hosts, wouldn't it be better to block these ports at the
border routers ??

Jude



----- Original Message ----- 
From: "Koh Keng Leng" <KOH_Keng_Leng () dsi a-star edu sg>
To: <security-basics () securityfocus com>
Sent: Friday, September 05, 2003 12:16 PM
Subject: Disable Netbios thru Registry for Windows 2K/XP


> hi all,
>
> Wonder if there is any way to disable netbios thru registry for
> Windows 2K/XP? especially ports 135 and 445. Thanks in advance for any 
> inputs.
>
> regards,
> Keng Leng
>
> ----------------------------------------------------------------------
> ----
-
> Attend Black Hat Briefings & Training Federal, September 29-30
> (Training), October 1-2 (Briefings) in Tysons Corner, VA; the world's 
> premier technical IT security event.  Modeled after the famous Black 
> Hat event in Las Vegas! 6 tracks, 12 training sessions, top speakers 
> and sponsors. Symantec is the Diamond sponsor.  Early-bird 
> registration ends September
6.Visit us: www.blackhat.com
> ----------------------------------------------------------------------
> ----
--
>



---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
----------------------------------------------------------------------------





---------------------------------------------------------------------------
Captus Networks
Are you prepared for the next Sobig & Blaster?
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Precisely Define and Implement Network Security
 - Automatically Control P2P, IM and Spam Traffic
FIND OUT NOW -  FREE Vulnerability Assessment Toolkit
http://www.captusnetworks.com/ads/42.htm
----------------------------------------------------------------------------