[isalist] Re: Netbois Name Requests from my external Network Interface address

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 28 Jan 2009 12:40:12 -0800

That's a best practice for any public-facing NIC, but unfortunately, it has 
nothing to do with name broadcasts.
You have to set the regvalue to gain quietness from those.


JimmyJoeBob Alooba
Office 2007 on Win7 Beta
[cid:image001.jpg@01C98145.8FD3AAB0]


From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Jerry Young
Sent: Wednesday, January 28, 2009 9:40 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

The other thing you could do - and which I usually do for external-facing 
interfaces that will only be servicing specific TCP traffic (80, 443, 25, etc.) 
- is flip to the WINS tab on the TCP/IP Properties Sheet for the interface and 
select the option "Disable NetBIOS over TCP/IP" in the NetBIOS setting box.
On Wed, Jan 28, 2009 at 11:49 AM, William T Holmes 
<wth1@xxxxxxxxxxx<mailto:wth1@xxxxxxxxxxx>> wrote:
http://www.ISAserver.org<http://www.isaserver.org/>
-------------------------------------------------------

Hi Jim,

Thanks for this.

Bill

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of Jim Harrison
Sent: Friday, January 09, 2009 11:03 AM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Re: Netbois Name Requests from my external Network Interface 
address

http://www.ISAserver.org<http://www.isaserver.org/>
-------------------------------------------------------

What you see has nothing whatsoever to do with those bindings.

HKLM\System\CurrentControlSet\Services\NetBT\Parameters
Name: NodeType
Type: DWORD
Value: 2

If it doesn't exist, create it and give it a value of 2.
Reboot the server.
All gone bye-bye; cya...

This happens because Windows operates as a M- or H-node by default (depends on 
the installation process and network detection logic).  By adding this value, 
you change it to a peer-node, which will not use NB name broadcasts.

Name resolution failures return much more quickly (don't have to wait for bcst 
cycles) and ISA doesn't have to waste time blocking and logging these packets.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx> 
[mailto:isalist-bounce@xxxxxxxxxxxxx<mailto:isalist-bounce@xxxxxxxxxxxxx>] On 
Behalf Of William T. Holmes
Sent: Thursday, January 08, 2009 4:18 PM
To: isalist@xxxxxxxxxxxxx<mailto:isalist@xxxxxxxxxxxxx>
Subject: [isalist] Netbois Name Requests from my external Network Interface 
address

Hello,



I have a continuous barrage of netbios name requests coming from my external 
network interface on my ISA server. These are being denied but I'm not sure why 
they are occurring in the first place. The interface does not have either the 
Client For Microsoft Networks or File and Printer Sharing Enabled. Is it normal 
for this traffic to occur from the external Network Interface?



Thanks Bill

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com<http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx>

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com<http://www.techgenix.com/>
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx<mailto:listadmin@xxxxxxxxxxxxx>



--
Cordially yours,
Jerry G. Young II
Microsoft Certified Systems Engineer

JPEG image

Other related posts: