I've tried a setup similar to this, but watch out for additional network 
traffic. The Microsoft naming services have a habit of generating huge 
amounts of network traffic between port 137 on the MS machine and the DNS 
server (port 53). Bizarrely, on one of my client's networks, this traffic 
increased substantially when MS Office was installed on Windows95 machines, 
to such an extent that every Word file open or print preview generated a 
DNS request !??. As my client was on as ISDN dialup, this could have 
resulted in substantial cost !

My advice: If you are forwarding from an MS machine over the net, deny 
connections from port 137->53 for both tcp and udp !




-----Original Message-----
From:   Fuzzy Fox [SMTP:[EMAIL PROTECTED]]
Sent:   Saturday, June 12, 1999 9:37 PM
To:     [EMAIL PROTECTED]
Subject:        [Masq]  Re: Windows Networking

I've tried a setup similar to this, but watch out for additional network 
traffic. The Microsoft naming services have a habit of generating huge a  
mounts of network traffic between port 137 on the MS machine and the DNS 
server (port 53). Bizarrely, on one of my client's networks, this traffic 
increased subsantially when MS Office was installed on Windows95 machines, 
to such an extent that every Word file open or print preview generated a 
DNS request. As my client was on as ISDN dialup, this could have resulted 
in substantial cost !

My advice: If you are forwarding from an MS machine over the net, deny 
connections from port 137->53 for both tcp and udp !


Ken <[EMAIL PROTECTED]> wrote:
>
> Can I map windows drives from "inside" to "outside" an IP MASQ box?

You might be able to do it, if you're not running a Samba daemon on your
masq box.  Try port-forwarding UDP and TCP ports 137-139 (that's six
port-forward lines) and let us know how it goes.

    ipmasqadm portfw -a -P tcp -L $localip 137 -R $internalmachine 137
    ipmasqadm portfw -a -P tcp -L $localip 138 -R $internalmachine 138
    ipmasqadm portfw -a -P tcp -L $localip 139 -R $internalmachine 139

    ipmasqadm portfw -a -P udp -L $localip 137 -R $internalmachine 137
    ipmasqadm portfw -a -P udp -L $localip 138 -R $internalmachine 138
    ipmasqadm portfw -a -P udp -L $localip 139 -R $internalmachine 139

--
   [EMAIL PROTECTED] (Fuzzy Fox)      || "Nothing takes the taste out of 
peanut
sometimes known as David DeSimone  ||  butter quite like unrequited love."
  http://www.dallas.net/~fox/      ||                       -- Charlie 
Brown


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or 
[EMAIL PROTECTED]


_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to