Re: Firewall has holes

[Fabio Massimo Di Nitto <f.dinitto@seabone.net>]

Jay Kelly wrote:
> 
> I did a check on my firewall using grc.com and found I have a hole from port
> 139 NetBios. Which I sure I did while I was playing with Samba. The question
> is how can I reverse this and shut down netbois. I have try to comment out
> netbios in /etc/sevides but I still have the problem. I want my firewall to
> be as stealth as possible. Any help would be great guys
> 
> --
> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null

Hi,
    if you need samba on your intranet you can simply use ipchains
(kernel ver 2.2.x)
ex: ipchains -I input -j DENY -s 0.0.0.0/0 -d yourexternalipadd 139 -p
tcp
and ipchains -I input -j DENY -s 0.0.0.0/0 -d yourexternalipadd 139 -p
udp

if you don't need samba it's enought or to stop the service

box#>/etc/init.d/samba stop

or deinstall it :))

I hope this can help you.....

-- 
 _____  ___  _    ___  ___  ___  _  _    _  _____  _____  _    _  _____
|_   _||  _|| |  |  _||  _|| _ || \/ |  | ||_   _||  _  || |  | ||  _  |
  | |  |  _|| |_ |  _|| |_ | _ || \/ |  | |  | |  |  _  || |_ | ||  _  |
  |_|  |___||___||___||___||___||_||_|  |_|  |_|  |_| |_||___||_||_| |_|
                SE@BONE - South European @ccess Back Bone
     ------------------ http://www.seabone.net/ -------------------
      Fabio Massimo Di Nitto       | Debian GNU/Linux Woody 2.2.15
      mailto:f.dinitto@seabone.net |         running on
      mailto:f.dinitto@tin.it      |  Laptop AMD K6-2 400Mhz 64Mb