Nope didn't get it. thanks, Amy Babinchak Harbor Computer Services | 248-850-8616 Mobile 248-890-1794 Web http://www.harborcomputerservices.net<http://www.harborcomputerservices.net/> Client Blog http://smalltechnotes.blogspot.com<http://smalltechnotes.blogspot.com/> Tech Blog http://securesmb.harborcomputerservices.net<http://securesmb.harborcomputerservices.net/> Buy My House: http://www.shannonrealty.com/vassar_mls_tour.html Are you an IT Pro? http://www.thirdtier.net<http://www.thirdtier.net/> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, January 28, 2009 8:34 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address I sent you a sched+ - I guess you didn't see it? JimmyJoeBob Alooba Office 2007 on Win7 Beta [cid:image001.jpg@01C9818B.EF4F2AF0] From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak Sent: Wednesday, January 28, 2009 5:24 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address Did you get my email about tomorrow? thanks, Amy Babinchak Harbor Computer Services | 248-850-8616 Mobile 248-890-1794 Web http://www.harborcomputerservices.net<http://www.harborcomputerservices.net/> Client Blog http://smalltechnotes.blogspot.com<http://smalltechnotes.blogspot.com/> Tech Blog http://securesmb.harborcomputerservices.net<http://securesmb.harborcomputerservices.net/> Buy My House: http://www.shannonrealty.com/vassar_mls_tour.html Are you an IT Pro? http://www.thirdtier.net<http://www.thirdtier.net/> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Wednesday, January 28, 2009 5:29 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address Dunno - were you looking at like this little guy does? JimmyJoeBob Alooba Office 2007 on Win7 Beta [cid:image001.jpg@01C9818B.EF4F2AF0] From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jerry Young Sent: Wednesday, January 28, 2009 2:00 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address Hmmm... I just spent some time watching the firewall log on my ISA box. I didn't see any NetBIOS broadcast traffic on my external interface. Am I not looking at it correctly? On Wed, Jan 28, 2009 at 4:24 PM, Jim Harrison <Jim@xxxxxxxxxxxx<mailto:Jim@xxxxxxxxxxxx>> wrote: Youbetchayoubet JimmyJoeBob Alooba Office 2007 on Win7 Beta Error! Filename not specified. From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On Behalf Of Jerry Young Sent: Wednesday, January 28, 2009 1:16 PM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address So you're saying even with NetBIOS over TCP/IP disabled on the interface you'll still get NetBIOS broadcasts sent out across it unless you specifically set that Registry value? On Wed, Jan 28, 2009 at 3:40 PM, Jim Harrison <Jim@xxxxxxxxxxxx<mailto:Jim@xxxxxxxxxxxx>> wrote: That's a best practice for any public-facing NIC, but unfortunately, it has nothing to do with name broadcasts. You have to set the regvalue to gain quietness from those. JimmyJoeBob Alooba Office 2007 on Win7 Beta Error! Filename not specified. From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On Behalf Of Jerry Young Sent: Wednesday, January 28, 2009 9:40 AM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address The other thing you could do - and which I usually do for external-facing interfaces that will only be servicing specific TCP traffic (80, 443, 25, etc.) - is flip to the WINS tab on the TCP/IP Properties Sheet for the interface and select the option "Disable NetBIOS over TCP/IP" in the NetBIOS setting box. On Wed, Jan 28, 2009 at 11:49 AM, William T Holmes <wth1@xxxxxxxxxxx<mailto:wth1@xxxxxxxxxxx>> wrote: http://www.ISAserver.org<http://www.isaserver.org/> ------------------------------------------------------- Hi Jim, Thanks for this. Bill -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On Behalf Of Jim Harrison Sent: Friday, January 09, 2009 11:03 AM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Re: Netbois Name Requests from my external Network Interface address http://www.ISAserver.org<http://www.isaserver.org/> ------------------------------------------------------- What you see has nothing whatsoever to do with those bindings. HKLM\System\CurrentControlSet\Services\NetBT\Parameters Name: NodeType Type: DWORD Value: 2 If it doesn't exist, create it and give it a value of 2. Reboot the server. All gone bye-bye; cya... This happens because Windows operates as a M- or H-node by default (depends on the installation process and network detection logic). By adding this value, you change it to a peer-node, which will not use NB name broadcasts. Name resolution failures return much more quickly (don't have to wait for bcst cycles) and ISA doesn't have to waste time blocking and logging these packets. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> [mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On Behalf Of William T. Holmes Sent: Thursday, January 08, 2009 4:18 PM To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Netbois Name Requests from my external Network Interface address Hello, I have a continuous barrage of netbios name requests coming from my external network interface on my ISA server. These are being denied but I'm not sure why they are occurring in the first place. The interface does not have either the Client For Microsoft Networks or File and Printer Sharing Enabled. Is it normal for this traffic to occur from the external Network Interface? Thanks Bill ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com<http://www.techgenix.com/> ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx> ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com<http://www.techgenix.com/> ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx> -- Cordially yours, Jerry G. Young II Microsoft Certified Systems Engineer -- Cordially yours, Jerry G. Young II Microsoft Certified Systems Engineer -- Cordially yours, Jerry G. Young II Microsoft Certified Systems Engineer ExchangeDefender Message Security: Check Authenticity<http://www.exchangedefender.com/verify.asp?id=n0T1OIQU015440&from=amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>