Firewall that blocks NetBEUI etc.

From: Mark (noemail@noemail.com)
Date: 12/19/02 

From: "Mark" <noemail@noemail.com>
Date: Thu, 19 Dec 2002 13:24:35 -0800

Personal firewall functionality is mostly oriented toward TCP/IP protocol. I
am looking for a firewall that can block/control/audit ALL traffic on
network adapter.

Motivation is following: in office, I have some nasty network guys that have
buddies that are into pranks. What they do they use administration tools to
log into your pc to see what are you doing - from their conversation I
understand that they can see my desktop, my processes and who knows what
else. When there is several of them, they bring performance of my machine
down - it is very slow, i can not really work. I can not stop them or prove
what is happening, since it is themselves that are about to conduct any
investigation - that is not going to find anything.

I have NT4WKS and we have advanced Microsoft network - they have some tool
like SMS or similar that enables them to remotely install software on all
machines.

I have tried to audit them with netstat or TCPview to see all network
connections, but there is nothing there. Are they using something else, like
some lower protocol like NetBEUI or similar? Is there a way to see all
NetBEUI connections (if such concept exists there) and all other traffic,
like audit shared file access, who from where and what amount of traffic?

I can not really install sniffer, since I could be accused of sniffing
traffic on LAN, ie. stealing passwords etc. But I would like to audit and
control all traffic coming to/from my machine.

So, i am looking for technical solutions to control all traffic to my
machine, not only tcp/ip. I know that it is not normal to run firewall on
machine in LAN, but this is not really normal situation. If i can block this
pranksters, and do my work on time ,i will be in much better position then
explaining that work is not done since some guys are fooling with my machine
and it works so, so slow when connected to lan. I might need to do some
explanation about firewall, but nobody really cares if I do work on time. If
I would be able to audit who connects and from where and amount of traffic
they generate, I would be in better position.

So, technically, I am looking for firewall that can control all traffic in
an easy way. In Kerio it is possible to create rules for other protocols, if
you know protocol id of some kind. I want something that has already
preconfigured all that. McAfee firewall 4 has some options for other
protocols, but I want more sophistication. And ability to audit non-tcp
"connections".

Relevant Pages

  • Re: Firewall that blocks NetBEUI etc.
    ... I have some nasty network guys that have ... >some lower protocol like NetBEUI or similar? ... >like audit shared file access, who from where and what amount of traffic? ... I know that it is not normal to run firewall on ...
    (comp.security.firewalls)
  • Re: Firewall that blocks NetBEUI etc.
    ... I have some nasty network guys that have ... >some lower protocol like NetBEUI or similar? ... >like audit shared file access, who from where and what amount of traffic? ... I know that it is not normal to run firewall on ...
    (comp.security.firewalls)
  • Re: Cant fileshare between XP pro and Winn98
    ... IPX/SPX is a network protocol, and using more than one protocol can ... Internet access, remove IPX/SPX. ... Permanently disable XP's built-in Internet Connection Firewall on ...
    (microsoft.public.windowsxp.network_web)
  • Re: Firewall that blocks NetBEUI etc.
    ... > Personal firewall functionality is mostly oriented toward TCP/IP protocol. ... > network adapter. ... > like audit shared file access, who from where and what amount of traffic? ...
    (comp.security.firewalls)
  • Re: Firewall that blocks NetBEUI etc.
    ... > Personal firewall functionality is mostly oriented toward TCP/IP protocol. ... in office, I have some nasty network guys that have ... > like audit shared file access, who from where and what amount of traffic? ...
    (comp.security.firewalls)