[isalist] Re: Netbois Name Requests from my external Network Interface address

  • From: Amy Babinchak <amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 28 Jan 2009 21:03:57 -0500

Nope didn't get it.

thanks,

Amy Babinchak

Harbor Computer Services | 248-850-8616

Mobile 248-890-1794
Web   
http://www.harborcomputerservices.net<http://www.harborcomputerservices.net/>
Client Blog   
http://smalltechnotes.blogspot.com<http://smalltechnotes.blogspot.com/>
Tech Blog   
http://securesmb.harborcomputerservices.net<http://securesmb.harborcomputerservices.net/>

Buy My House: http://www.shannonrealty.com/vassar_mls_tour.html

Are you an IT Pro?  http://www.thirdtier.net<http://www.thirdtier.net/>

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jim Harrison
Sent: Wednesday, January 28, 2009 8:34 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

I sent you a sched+ - I guess you didn't see it?


JimmyJoeBob Alooba
Office 2007 on Win7 Beta
[cid:image001.jpg@01C9818B.EF4F2AF0]


From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Amy Babinchak
Sent: Wednesday, January 28, 2009 5:24 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

Did you get my email about tomorrow?

thanks,

Amy Babinchak

Harbor Computer Services | 248-850-8616

Mobile 248-890-1794
Web   
http://www.harborcomputerservices.net<http://www.harborcomputerservices.net/>
Client Blog   
http://smalltechnotes.blogspot.com<http://smalltechnotes.blogspot.com/>
Tech Blog   
http://securesmb.harborcomputerservices.net<http://securesmb.harborcomputerservices.net/>

Buy My House: http://www.shannonrealty.com/vassar_mls_tour.html

Are you an IT Pro?  http://www.thirdtier.net<http://www.thirdtier.net/>

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jim Harrison
Sent: Wednesday, January 28, 2009 5:29 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

Dunno - were you looking at like this little guy does?


JimmyJoeBob Alooba
Office 2007 on Win7 Beta
[cid:image001.jpg@01C9818B.EF4F2AF0]


From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jerry Young
Sent: Wednesday, January 28, 2009 2:00 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

Hmmm...

I just spent some time watching the firewall log on my ISA box.  I didn't see 
any NetBIOS broadcast traffic on my external interface.

Am I not looking at it correctly?
On Wed, Jan 28, 2009 at 4:24 PM, Jim Harrison 
<Jim@xxxxxxxxxxxx<mailto:Jim@xxxxxxxxxxxx>> wrote:

Youbetchayoubet





JimmyJoeBob Alooba

Office 2007 on Win7 Beta

Error! Filename not specified.





From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jerry Young
Sent: Wednesday, January 28, 2009 1:16 PM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>

Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address



So you're saying even with NetBIOS over TCP/IP disabled on the interface you'll 
still get NetBIOS broadcasts sent out across it unless you specifically set 
that Registry value?

On Wed, Jan 28, 2009 at 3:40 PM, Jim Harrison 
<Jim@xxxxxxxxxxxx<mailto:Jim@xxxxxxxxxxxx>> wrote:

That's a best practice for any public-facing NIC, but unfortunately, it has 
nothing to do with name broadcasts.

You have to set the regvalue to gain quietness from those.





JimmyJoeBob Alooba

Office 2007 on Win7 Beta

Error! Filename not specified.





From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jerry Young
Sent: Wednesday, January 28, 2009 9:40 AM

To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address



The other thing you could do - and which I usually do for external-facing 
interfaces that will only be servicing specific TCP traffic (80, 443, 25, etc.) 
- is flip to the WINS tab on the TCP/IP Properties Sheet for the interface and 
select the option "Disable NetBIOS over TCP/IP" in the NetBIOS setting box.

On Wed, Jan 28, 2009 at 11:49 AM, William T Holmes 
<wth1@xxxxxxxxxxx<mailto:wth1@xxxxxxxxxxx>> wrote:

http://www.ISAserver.org<http://www.isaserver.org/>
-------------------------------------------------------

Hi Jim,

Thanks for this.

Bill

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jim Harrison
Sent: Friday, January 09, 2009 11:03 AM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

http://www.ISAserver.org<http://www.isaserver.org/>
-------------------------------------------------------

What you see has nothing whatsoever to do with those bindings.

HKLM\System\CurrentControlSet\Services\NetBT\Parameters
Name: NodeType
Type: DWORD
Value: 2

If it doesn't exist, create it and give it a value of 2.
Reboot the server.
All gone bye-bye; cya...

This happens because Windows operates as a M- or H-node by default (depends on 
the installation process and network detection logic).  By adding this value, 
you change it to a peer-node, which will not use NB name broadcasts.

Name resolution failures return much more quickly (don't have to wait for bcst 
cycles) and ISA doesn't have to waste time blocking and logging these packets.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of William T. Holmes
Sent: Thursday, January 08, 2009 4:18 PM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Netbois Name Requests from my external Network Interface 
address

Hello,



I have a continuous barrage of netbios name requests coming from my external 
network interface on my ISA server. These are being denied but I'm not sure why 
they are occurring in the first place. The interface does not have either the 
Client For Microsoft Networks or File and Printer Sharing Enabled. Is it normal 
for this traffic to occur from the external Network Interface?



Thanks Bill

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com<http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx>

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com<http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx>



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer

ExchangeDefender Message Security: Check 
Authenticity<http://www.exchangedefender.com/verify.asp?id=n0T1OIQU015440&from=amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>


JPEG image

Other related posts: