Re: SMB new info

"Magnus Wedberg" <[email protected]> Mon, 14 Jun 2004 14:14:47 +0200
Newsgroups gmane.comp.security.zebedee.general
Message-ID <40CDB2D7.12816.21244F@localhost>
Replying to an old post...

> More news on this subject:  It's possible when using win2000, XP or
> higher systems, to use SMB direct over TCP/IP, it's on port 445 - due
> to a "feature" in windows 2K and XP however, port 445 is *always*
> bound to 0.0.0.0 and it can't be changed, ony desactivated using a
> registry hack:
[snip well-documented hack using TransportBindName registry key]

I am right now researching something very similar to this -- I intend 
to tunnel netbios traffic using multiple network cards (without a 
dedicated gateway machine). One card handles normal network traffic, 
the other card tunnels Zebedee traffic (through forwarded ports in 
the routers). Both server and client are to be run on the same 
machine, and with this setup at both ends I think seamless two-way 
communication can be established.

I have managed to get this to work on port 139, but it's hell to get 
it to work with SMB on 445 (i.e. "bloody impossible"). My use of one 
single machine at each end, only,  makes it impossible to disable SMB-
over-TCP altogether -- because I have to do it on both machines and 
then nothing can be tunneled. At the same time I would be happy to 
not run 139 communication (which I understand is more "chatty", or 
does this only apply to browsing?) and in a best-case scenario tunnel 
the ports so that the network "sees" a distant server as a local one.

Obviously this would be easy stuff with a gateway machine with 
Zebedee merrily tunneling away on all ports, but I am stubborn as a 
mule and tight-fisted like an otter, and I just want to disable all 
Windows networking on one card, basically, while keeping it on the 
other. Not too demanding, one would think.

I am now a little stuck, more than a little frustrated, and am 
looking for smarter and more experienced people than me.
So speak up! ;-) 
 
-- 
Magnus Wedberg
http://www.magnuswedberg.com/
mw AT 9000.org
Warning! Objects in viewfinder may be closer than they appear.





-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504