You can also block these from your firewalling rules if you want to.   
 This would keep the burden down on diald.  I'm not sure which way is   
more "kernel friendly" but I block 'em in the firewall.  If you're using   
ipfwadm (or the ipfwadm "conversion" script for ipchains) the commands   
would be:

#Block Windows housekeeping traffic from triggering autodial etc.
/sbin/ipfwadm -F -a deny -P tcp -S 0.0.0.0/0 137:139
/sbin/ipfwadm -F -a deny -P udp -S 0.0.0.0/0 137:139

Just add 'em to your existing firewall script.

Note, this keeps 'em from going out on the ppp connection too and eating   
up valuable bandwidth there.  They should be dropped at the first   
internet router in any case though I'm not sure how IP Masq would deal   
with them.

Guru's please speak out on these issues.  Would these windows   
housekeeping traffic be Masqueraded to the Internet?  Which block would   
be more kernel friendly?

peace favor your sword

 ----------
From:  K.A. Steensma
Sent:  Thursday, March 04, 1999 8:01 AM
To:  LKLawson; 'LINUX-DI@SMTP <[EMAIL PROTECTED]>'
Subject:  [Fwd: I never thought that I would be on

Original Subject:
[Fwd: I never thought that I would be one too -]

TO: Anssi Sallinen <[EMAIL PROTECTED]>

This message (from Matt Kressel) solved all my problems.  But it looks   
like
you have
already done this.  But have you 'included' the correct filter file?

Matt Kressel wrote:

> "K.A. Steensma" wrote:
> >
> > I (guess) that I am (to dumb) not understanding the how and where of   
the
fix.
> > I did go throught the man pages for diald and diald-examples but I   
only
caught
> > a short half paragraph about netbios-ns.  Can you give (a dumby) some   
more
> > help.  TIA Keith
> >
>
> > > Every 10 minutes or so Win 95/98/NT sends out netbios-ns requests   
to say
> > > "Anybody out there?".  Just disable ports 137,138, and 139 from   
bringing
> > > up the link in your standard.filter file.
> > >
>
> Add the following to the standard.filter file and use the "include"
> directive in the diald.conf to include the standard.filter file:
>
> ignore udp udp.source=udp.netbios-ns
> ignore udp udp.dest=udp.netbios-ns
>
> You may have to do this with netbios-dgm and netbios-ssn as well and
> perhaps tcp as well as udp.  This is to make sure all Windows traffic   
is
> essentially ignored.
>
> -Matt
>
> --
> INTERNET:  [EMAIL PROTECTED]  | Matt Kressel
> "And you run, and you run to catch up with the Sun, but its
>  sinking.  Racing around to come up behind you again." -PF


 -
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to