As part of your Imail server and other hardening of public servers runing MS OS ... block in ports 137-139 at border router (netbios). no netbios on public servers. no ms networking client on public servers and see below Len ------------- >From: "Patrick B [Lists]" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: default shares >Date: Fri, 21 Sep 2001 12:48:07 +0200 >X-Mailer: Microsoft Outlook Express 5.50.4522.1200 >X-Lookup-Warning: reverse lookup on original sender failed >X-MDRemoteIP: 10.1.1.11 >X-Return-Path: [EMAIL PROTECTED] >X-MDaemon-Deliver-To: [EMAIL PROTECTED] >Reply-To: [EMAIL PROTECTED] >List-Unsubscribe: <mailto:[EMAIL PROTECTED]> >X-INTM-Message-Id: ><INTM-52323-1229236-2001.09.21-06.13.28--lconrad#[EMAIL PROTECTED]> >X-Virus-Scanned: by VirusGate.MEIway.com >X-RCPT-TO: <[EMAIL PROTECTED]> > >from the IIS security checklist : > >Remove All Net Shares >Run Net Share from the command-line and make sure you delete all of them >using Net Share /d. You should also prevent all administrative shares (C$, >D$, ADMIN$) by setting the following in the Registry: > > > > Hive > HKEY_LOCAL_MACHINE\SYSTEM > > Key > CurrentControlSet\Services\LanmanServer\Parameters > > Name > AutoShareServer > > Type > REG_DWORD > > Value > 0 > > > > > >in case you are securing an NT 4.0 Workstation, the registry value mentioned >in the MS security checklist page 5, "AutoShareServer", didn't work and you >still have the default share, use : "AutoShareWks" instead. http://MenAndMice.com/DNS-training http://BIND8NT.MEIway.com : ISC BIND 8.2.4 for NT4 & W2K http://IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
