RE: Blocking NetBios

["Streeter, Joseph (WI)" <Joseph.Streeter () wi ngb army mil>]

You can use IPSec on the clients to only allow NBT access to the other
machines in the department. If you unbind the service from the NIC or turn
it off they will all loose file and print sharing. Or block the appropriate
ports for that VLAN.


//SIGNED//
JOSEPH A. STREETER
SSG, WIARNG
System Administrator
DSN: 724-3673
COM: 608-242-3673
joseph.streeter () wi ngb army mil
 

-----Original Message-----
From: Kareem Mahgoub [mailto:kareem () thewayout net] 
Sent: Thursday, June 10, 2004 3:21 AM
To: security-basics () securityfocus com
Subject: Blocking NetBios

Hi list,
I have a request from one of our clients to block NetBios in thier Network
( No one should be able to see the shared resources of others)
I have googled around and all what I have found is blocking it on the edge
communication equipment ( router, xDSL modemd..etc) Which will be done.
The most important thing is to disable it internally ( inside the LAN)
Any suggestions???
Taking in consideration that there is  DHCP server for the clients ( If it
can contribute in the Solution)
Best Regards,
Kareem Mahgoub


---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the
skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------

---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------