RE: Shared drives through a firewall

http://support
.microsoft.com/kb/301673

HTH,
Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isas
erver.org/shinder/
Book: http://tinyurl.com/3xqb7

MVP -- Microsoft Firewalls (ISA)

 

> -----Original Message-----
> From: listbouncesecurityfocus.com 
> [mailto:listbouncesecurityfocus.com] On Behalf Of Nicolas
RUFF
> Sent: Tuesday, April 17, 2007 3:54 AM
> To: aehealdgmail.com
> Cc: focus-mssecurityfocus.com
> Subject: Re: Shared drives through a firewall
> 
> > I am trying to persuade a client NOT to map a
drive through 
> two firewalls to
> > an untrusted server in a DMZ to run an
application. I've 
> tried Googling
> > Netbios and security, but get so many entries as
to be useless.
> > Other than the latency issues, and my ten cents
that it 
> seems to me to be an
> > enormously foolish idea, can you folks offer me
any further 
> ammunition?
> 
> Here is your silver bullet: it won't work 
> 
> The SMB+NetBIOS+TCP/139 protocol is not NAT aware.
> 
> So unless your client is using public IP addresses
internally, it will
> just fail.
> 
> Regards,
> - Nicolas RUFF
> 
> 
>