port 139 open , how to close it ?

Hi,

i've got a network running which has one linux server and several
windows clients.
When ik check my defences i see that port 139 is open ( seen from the
internet ).
How can i close this for the outside world ?
I want to be able to access the linux machine from the windows
clients.

i use the mandrag 9.0 distribution.

Regards
ET

On Fri, 02 Jan 2004 12:23:43 +0100, E. Polinski <(E-Mail Removed)>
wrote:

>Hi,
>
>i've got a network running which has one linux server and several
>windows clients.
>When ik check my defences i see that port 139 is open ( seen from the
>internet ).
>How can i close this for the outside world ?
>I want to be able to access the linux machine from the windows
>clients.
>
>i use the mandrag 9.0 distribution.
>
>Regards
>ET

The question is too open ended to answer, but I can give you a hint -
you need to block 139 inbound and outbound at the firewall, making
sure you only block it at the EXTERNAL interface.

Mike-

Mornings: Evolution in action. Only the grumpy will survive.
-----------------------------------------------------

Please note - Due to the intense volume of spam, we have
installed site-wide spam filters at catherders.com. If
email from you bounces, try non-HTML, non-encoded,
non-attachments.


----== Posted via Newsfeed.Com - Unlimited-Uncensored-Secure Usenet News==----
http://www.newsfeed.com The #1 Newsgroup Service in the World! >100,000 Newsgroups
---= 19 East/West-Coast Specialized Servers - Total Privacy via Encryption =---

E. Polinski escribió:
>Hi,
>
>i've got a network running which has one linux server and several
>windows clients.
>When ik check my defences i see that port 139 is open ( seen from the
>internet ).
>How can i close this for the outside world ?
>I want to be able to access the linux machine from the windows
>clients.
>
>i use the mandrag 9.0 distribution.
>
>Regards
>ET

This port is used for Samba. Check smb.conf, in order to bind Samba
services only to your internal NIC and your internal LAN IP range.

Specifically, check this lines:

interfaces = eth1 This is the interface that points to my LAN
hosts allow = 192.168.1. This is the range of IP's in my LAN.

and also, place a firewall that rejects all attempts to access this port
from Internet, but not from your LAN.

--
Atte.
Álvaro Palma Aste
************************************************** ****
It's the only form of protest they're allowed
I've seen their silent faces scream so loud
If they were to speak these words they'd go missing too
Another woman on a torture table what else can they do

Sting - They Dance Alone (Cueca Sola)...

30 años, ni perdón ni olvido, JUSTICIA!