SCOUG-HELP Mailing List Archives

<< Previous Message << >> Next Message >>

Date:	Thu, 21 Sep 2006 11:13:52 -0700
From:	J R FOX <jr_fox@pacbell.net >
Reply-To:	scoug-help@scoug.com
To:	scoug-help@scoug.com
Subject:	SCOUG-Help: Re: Networking

Content Type: text/plain

--- Harry Motin wrote:

> On Wed, 20 Sep 2006 10:20:45 -0700, J R FOX wrote:
>
> >Is this something that is likely to be taken care
> of
> >(by default), if one is using a hardware firewall
> with
> >NAT translation ? (Because your "real" address is
> >different from your external one ?) Or, are
> further
> >adjustments required ?
>
> Jordan,
> A firewall with network address transation (NAT)
> helps, but it is not the complete story.
> You also need a firewall (hardware or software) that
> blocks TCP/P over NetBEUI
> transmissions from the Internet into your LAN.
> That's equivalent to blocking all incoming
> on network ports 138 (netbios) and 139 (netbios
> ssn). The Injoy Pro firewall has this
> ability. And for strictly Windows users the
> ZoneAlarm Pro firewall has this capabilitiy.
> Some hardware firewalls have it, too.
> HCM

Thanks, Harry. My H/W firewall seems to have
provision for turning just about every "In" or "Out"
port ON or OFF, as desired . . . it's just that they
have the details of doing this pretty hard for the
layman or semi-layman to follow. I also wonder about
what unintended functionality-hobbling effects turning
various ports off may entail. Quite awhile back, I
managed to figure out what ports -- blocked by default
-- I needed to unblock, in order to enable 1) IRC -
type stuff, and 2) streaming RealPlayer content.
Neither of these capabilities are truly vital here, so
I may have compromised the firewall's benefit somewhat
by doing so.

Jordan

=====================================================

To unsubscribe from this list, send an email message
to "steward@scoug.com". In the body of the message,
put the command "unsubscribe scoug-help".

For problems, contact the list owner at
"postmaster@scoug.com".

=====================================================

Return to [ 21 | September | 2006 ]

SCOUG, Warp Expo West, and Warpfest are trademarks of the Southern California OS/2 User Group. OS/2, Workplace Shell, and IBM are registered trademarks of International Business Machines Corporation. All other trademarks remain the property of their respective owners.