Re: campus routers and SMB

Yes, if you use the Windows Firewall GUI and under "Exceptions" check
"File and Printer Sharing", the scope of the exception is for the local
subnet only by default. If you make exceptions by defining the port
yourself (click Add Port..), the default is Any Computer.

Allison Henry
System and Network Security
University of California, Berkeley
http://security.berkeley.edu

Ted Crum wrote:
> Thanks all.
>
> I have a user who had been advised by his outgoing staff that he would
> have trouble with Windows sharing between the two subnets that Michael
> so amazingly conjured. I thought it made no sense.
>
> It turns out that the Windows (XP) Firewall on one of the machines had
> exceptions for NBT ports 135-139 and SMB port 445, for the _subnet_only_.
> (Is this the default? It also had ICMP-echo open.) That explains the
> problem spanning subnets.
>
> All fixed.
>
> -tc
>

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Mon Jun 12 17:12:09 2006