Re: SMB new info
"Magnus Wedberg" <[email protected]> Mon, 14 Jun 2004 14:14:47 +0200
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <40CDB2D7.12816.21244F@localhost> |
Replying to an old post... > More news on this subject: It's possible when using win2000, XP or > higher systems, to use SMB direct over TCP/IP, it's on port 445 - due > to a "feature" in windows 2K and XP however, port 445 is *always* > bound to 0.0.0.0 and it can't be changed, ony desactivated using a > registry hack: [snip well-documented hack using TransportBindName registry key] I am right now researching something very similar to this -- I intend to tunnel netbios traffic using multiple network cards (without a dedicated gateway machine). One card handles normal network traffic, the other card tunnels Zebedee traffic (through forwarded ports in the routers). Both server and client are to be run on the same machine, and with this setup at both ends I think seamless two-way communication can be established. I have managed to get this to work on port 139, but it's hell to get it to work with SMB on 445 (i.e. "bloody impossible"). My use of one single machine at each end, only, makes it impossible to disable SMB- over-TCP altogether -- because I have to do it on both machines and then nothing can be tunneled. At the same time I would be happy to not run 139 communication (which I understand is more "chatty", or does this only apply to browsing?) and in a best-case scenario tunnel the ports so that the network "sees" a distant server as a local one. Obviously this would be easy stuff with a gateway machine with Zebedee merrily tunneling away on all ports, but I am stubborn as a mule and tight-fisted like an otter, and I just want to disable all Windows networking on one card, basically, while keeping it on the other. Not too demanding, one would think. I am now a little stuck, more than a little frustrated, and am looking for smarter and more experienced people than me. So speak up! ;-) -- Magnus Wedberg http://www.magnuswedberg.com/ mw AT 9000.org Warning! Objects in viewfinder may be closer than they appear. ------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X. From Windows to Linux, servers to mobile, InstallShield X is the one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504