Re: Black Ice and smb

From: Ziggi (ziggizag@poczta.onet.pl)
Date: 04/18/02 

From: ziggizag@poczta.onet.pl (Ziggi)
Date: 18 Apr 2002 04:26:46 -0700

Hi !

Thank you for your prompt reply !

Anyway - if you be so please - let me ask you more :-)

Currently indeed 'internet file sharing' option is disabled, though -
due to setting firewall setting as described in my original post I am
able to access files on the server (mostly files on my website).

My question is - what is the right (more safe) configuration (there is
a network router before the server)?:

1) Leaving the current configuration and accepting annoying alerts on
failed SMB login
2) Setting "internet file sharing" option enabled

I am not as much aware of the real meaning of this "internet file
sharing" option - what it really do. I only know that now
(theoretically) only my workstation is allowed to access ports
137,138,139 and 445, so - as the file sharing between my workstation
and the server is working properly (if neglect these alerts) - I feel
comfortable that potential intruders from the world will have problems
to break in (and router's packet filtering makes IP spoofing
difficult).

In a contrary - I worry enabling file sharing option in the BlackIce
configuration as I think then the only restriction to access files on
shared directories on the server is the password system. I don't trust
it as brute-force password grinding is quite an easy hacking (you know
- logging in the server's shared directories every day from my
workstation - I don't like to enter complicated, 20 signs long
password).

So - I would like to see your advice on the subject.

Thank you,
Ziggi

Relevant Pages

  • Re: my network places setup
    ... my file sharing is on, the server, workstation and computer browser are all automatic and started. ... In Windows XP SP2 make sure that the Windows Internet Connection ... In Windows XP make sure that the Server, Workstation and Computer ...
    (microsoft.public.windowsxp.general)
  • Slow response time when browsing server folders
    ... >file sharing (file server), DHCP server and Remote ... >response time when browsing the shared folders on the ... >from the workstation we used to have. ...
    (microsoft.public.windows.server.sbs)
  • Re: errors 1030 and 1058
    ... > these are the error in the event log. ... > Windows cannot query for the list of Group Policy ... You must use only the internal DNS server for the AD Domain on all members ... file sharing must be enabled on the ...
    (microsoft.public.windows.server.dns)
  • Re: Access to server denied
    ... I have tried following the steps under "Advance aka Classic File Sharing". ... The accounts are all active (for both server side and pc side). ... of having a domain, and simplify your setup. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking Windows Server 2003 and XP Home
    ... Open My Computer from the Start Menu or Windows XP Desktop. ... Click on the View tab and locate the "Use Simple File Sharing ... To enable Simple File Sharing, ensure this checkbox is checked. ... running Server 2003. ...
    (microsoft.public.windows.server.general)