From owner-freebsd-questions  Mon Nov 13 12:28:55 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from draenor.org (draenor.org [196.36.119.129])
	by hub.freebsd.org (Postfix) with ESMTP id 6BD7137B479
	for <freebsd-questions@freebsd.org>; Mon, 13 Nov 2000 12:28:51 -0800 (PST)
Received: from marcs by draenor.org with local (Exim 3.16 #1)
	id 13vQDO-000622-00; Mon, 13 Nov 2000 22:28:30 +0200
Date: Mon, 13 Nov 2000 22:28:30 +0200
From: Marc Silver <marcs@draenor.org>
To: mgruver@reveregroup.com
Cc: freebsd-questions@freebsd.org
Subject: Re: Best way to block SMB ports?
Message-ID: <20001113222830.M6201@draenor.org>
References: <86256996.0057B7FE.00@main.reveregroup.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <86256996.0057B7FE.00@main.reveregroup.com>; from mgruver@reveregroup.com on Mon, Nov 13, 2000 at 10:56:14AM -0500
X-Operating-System: FreeBSD 4.1-STABLE
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hi there,

Just deny ports 137-139 (TCP and UDP) to block all netbios traffic.  :)

Cheers,
Marc

On Mon, Nov 13, 2000 at 10:56:14AM -0500, mgruver@reveregroup.com wrote:
> 
> 
> I have had some intrusion attempts this weekend immediately after
> installing the Samba port on FreeBSD from some punks in Germany, of
> all places (luckily they left their userid and domain trying to login
> to FTP and I reported them to their ISP, t-dialin.net).  However, I
> would like to block the SMB broadcasting through my firewall (I have
> natd and the firewall daemons going).  Any suggestions on the
> applicable firewall rules?
> 
> mgruver@reveregroup.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message