Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it secure for a firewall to allow NetBIOS connections from the internal network to the DMZ?

  • If not secure, what are the risks?
  • If secure, what is the FUD about and what are the counterarguments?
share|improve this question
add comment

1 Answer

up vote 10 down vote accepted

No. Typically you don't want your servers where they trust any other systems because that means they could compromise the DMZ server and tunnel using that trusted relationship. That means no domains, etc. Therefore, NetBIOS is not exactly useful since there are no trusts. Also, by the very nature of a system being in a DMZ the recommendation is:

  • Uninstall what you don't need
  • Disable it if you can't uninstall it

This goes for services, users, protocols, etc. Therefore, NetBIOS usually gets struck pretty quick.

share|improve this answer
2  
+1 for Brian - also, NetBIOS is more or less a legacy protocol now; you should be able to do everything that it provides using DNS, SMB etc. –  user2278 May 14 '09 at 13:13
    
Affirmation for the above. No NetBIOS through the firewall. –  squillman May 14 '09 at 13:44
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.