druddle

i am not a win2k man so any help would be nice !!!

in my advanced tcp/ip settings should i disable netbios ?? should i also be using ip security and tcp/ip filtering ??

i use win2k sp2 with zonealarm and have a cable modem connection.

cheers
dave

Ga22ar

On the adapter that connects you to the internet disable both File and Printer Sharing and MS Client..

These two effectively disable the dangerous NetBIOS ports on the adapter..

You can use port filtering on the adpater too if you wish though it will get messy and is hard to manage long term..

IP Security is to do with VPNs so unless you use one dont touch it..

If you have the FW in place then both actions are a little pointless as the FW will control the traffic through the adpater, assuming of course you have set it up correctly..

Cheerz

[This message has been edited by Ga22ar (edited 26 July 2001).]

dowser

If this device never has to connect to another windows box on this interface, yes!

Just disabling file/print sharing, etc. will not disallow other NetBIOS attempts (from nbtstat up to admin requests).

Disabling NetBIOS basically blocks ports tcp/137-139.....configured to be blocked on every corporate firewall known to man....wellllll, that's not strictly true

The same can be done on NT4, either via bindings or port filtering.

Richard