If you are in a mood for some fun reading on the File and Print Sharing ports 
on Windows, why not read what is on the <http:grc.com> site.

Many find Mr Gibson questionable in respect to some of his opinions, but in the 
main, he is not far off the mark.

I'm sure you will end up denying the requests unless you have some very secure 
connections.  :-)



On 23 Nov 2001, at 15:32, Ziggy wrote:

>
>well those ports belong to netbios which is a very vunlerable protocol so if
>you plan on implementing this on your WAN or whatever you might want to look
>into some kind of tunneling e.g IPSEC e.t.c to make it secure.
>
>
>
>-----Original Message-----
>From: Thomas Ullrich [mailto:[EMAIL PROTECTED]]
>Sent: Wednesday, November 21, 2001 10:54 AM
>To: Security-basics
>Subject: Win Network Fileshares
>
>
>Often users in different locations of our company (e.g. a user in the US
>and a user in Belgium) want to use network filesharing via the mapping
>functionality of Windows' file-explorer. I think the ports 137 to 139
>must be opened on the FW for this. But usually I try to convince my
>users that they should not use this mechanisms on our WAN. Does anybody
>has security related arguments for me to turn those requests down.
>
>Thomas
>
>
>


--
Richard H. Cotterell <mailto:[EMAIL PROTECTED]>

A quotable quote:  
It is a socialist ideal that making profits is a vice.
I consider the real vice is making losses.
  -Sir Winston Leonard Spencer Churchill





Reply via email to