From owner-freebsd-security Tue Jun 13 10:40:39 2000 Delivered-To: freebsd-security@freebsd.org Received: from saturn.terahertz.net (saturn.terahertz.net [216.165.129.80]) by hub.freebsd.org (Postfix) with ESMTP id 289A437B6F7 for ; Tue, 13 Jun 2000 10:40:32 -0700 (PDT) (envelope-from sideshow@terahertz.net) Received: from localhost (sideshow@localhost) by saturn.terahertz.net (8.9.3/8.9.3) with ESMTP id MAA30031; Tue, 13 Jun 2000 12:33:56 -0500 (CDT) Date: Tue, 13 Jun 2000 12:33:56 -0500 (CDT) From: Matt Watson To: Harald Haugnes Cc: "'George.Giles@mcmail.vanderbilt.edu'" , freebsd-security@FreeBSD.ORG Subject: RE: netbios In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org NetBIOS should only be open if your running samba. Incase you don't know NetBIOS is a part of windows' (at least its mostly used with windows) network communication protocol for filesharing and printer sharing etc. You should be able to see the daemon running as 'nmbd' and 'smbd' you'll want to kill both of them. However its obviously being started at bootup time in your case, i'm not sure where freebsd would keep the startup for samba, probably /etc/rc.conf or /etc/rc.local. If you don't find samba running i don't know whjat else it would be... i've never seen anything but samba use it. You could find out using 'sockstat'. -- Matt Watson TeraHertz Communications On Tue, 13 Jun 2000, Harald Haugnes wrote: > what if you looked in your inetd.conf? > you should be able to disable it from there. > > ----------------------------------------------------- > Sincerly, > Harald Haugnes > ----------------------------------------------------- > Kvalito IT AS Tlf: 73 54 64 80 > Pb. 1238 Fax: 73 54 64 76 > 7462 Trondheim > > http://www.kvalito.no/ > Konto nr 8601.05.43942 > ----------------------------------------------------- > Hi! I'm a .signature virus! > cp me into your .signature file to help me spread! > ----------------------------------------------------- > > > -----Original Message----- > > From: George.Giles@mcmail.vanderbilt.edu > > [mailto:George.Giles@mcmail.vanderbilt.edu] > > Sent: 13. juni 2000 14:59 > > To: freebsd-security@freebsd.org > > Subject: netbios > > > > > > > > > > I have closed all ports except 21, 22 using ipfw. I find on > > scanning a port 139 > > open called NETBIOS. How do I close? > > > > Please advise, > > > > George > > > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message