Re: Using Netbui on a w2k setup

chris_at_nospam.com
Date: 06/26/04 

Date: Sat, 26 Jun 2004 19:45:52 GMT

On Sat, 26 Jun 2004 10:04:43 -0400, george12pds
<georgeonetwopds@excite.com> wrote:

>I'm trying to setup a home network behind a NAT router on w2k
>machines. In basic security guidelines, one recommendation is to
>disable netbios over tcp and use netbui (a non rout able protocol) in
>its place. In trying to implement this procedure, I find I also have
>to enable Client for MS networks and File and printer sharing. Is this
>correct? Those same guidelines often recommend turning off these two,
>but I cannot get file sharing to work without them
>
>Is there anything more, or different , that I should do?
>
>My LAN properties looks like this
>
>X Client for MS networks
>X File and printer sharing
>X Netbui Protocol
>X Internet protocol
> >properties> advanced> wns >(X disable netbios over tcp)

Using a non-routable protocol for Netbios is a good method for
protecting it from external attack. You could use ipx or netbeui.
Windows XP by default doesn't install netbeui, but it can be added
from the install CD by following these instructions.
http://www.perfectdrivers.com/howto/addingnetbeui.html

For additional security, make sure you router is properly configured
for any firewalling capabilities. Also make sure you run current
antivirus software. Peridodically run adware or spybot to get rid of
spyware tha always seems to sneak in (esp with IE).

-Chris