NetBIOS over TCP/IP and Windows Sockets

["C. K. Lung" <cklung () ica net>]

We have a few NT servers and a BDC in a DMZ and would like to manage them
behind a firewall.  I am warned that I would create "vulnerabilities" myself
by openning up some ports (135, 137, 138, 139?) to allow NetBIOS over TCP/IP
traffic going through.

How danger is to open up the port 1521 on a firewall to allow users to
access a Oracle database through a web browser in a DMZ?

Could someone point me to a right direction to find out more technical
information these "dangers"?

Any info is greatly appreciated.

Thanks,

C.K.
clung () hotmail com