Re: Howto workaround new NetBIOS vuln.

Lee Sharp <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Quark Group - Hilton Travis wrote:
> G'day Richard,
> 
> Totally - configuring *your* DHCP Server to disable NetBIOS won't do diddly squat to protect a laptop in a public area or hotel and the Microsoft article referred to doesn't take that into consideration at all.  Also, hoping the AP in the Hotel you're staying in - unless it is one in which you maintain the Wi-Fi setup - has client isolation enabled is like hoping the drunk girl you slept with at that party the other night that you can almost remember some of didn't have an STI - it isn't a good nor reliable way of staying safe.  :)
> 
> Disabling "Automatically detect settings" on any laptops you support will ensure this NetBIOS attack won't work on them, however it then relies on the Hotel knowing what the settings are for any proxies - which REALLY should be transparent proxies if the truth be told!  :)

Hiton, I was the OP, and I am the hotel. :)  And I am not trying to fix 
the problem.  I am just trying to make "all reasonable efforts" and cut 
down on my support issues.  Also shutting off NetBIOS would clean up the 
logs a bit as it is a chatty damn protocol.

			Lee

PS: User mode isolation only works if you have 1 AP.  You can stilol see 
everyone on the other APs.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.