NetBIOS attacks - What can I do?

harinagar

Newbie
[OP]
Jun 12, 2005
2
0
The Sify LAN is connected 24x7, and so are the attempts by some of my neighbouring(?) users to launch NetBIOS attacks. The attempts come from only a select handfull of IP addresses, they might be some wannabe crackers/freeloaders, or some virus using them as a host, but they are really annoying me. I know I can turn off the warnings in ZoneAlarm anytime, but when I have their IP addresses(they are all local: a.b.c.x , a.b.c=same as in my LAN config.), isnt' there something, i can do? Whom can I complain to? the Cableguy or Sify CustCare. Right now i just ping them back to say hello, but one of them, the most troublesome :ph34r: , i wanna give a boot :wacko: . Please comment.
 
H

Helios

Add the IPs/IP range in the Banned IPs list and relax.Allow only urself in the Trusted IPs list. :lol:
 

magnet

Newbie
Regulars
Apr 1, 2005
99
0
hari.....call the customer care and add some masala mirchi and say from this ip i m getting probs.........then be another user again call and say this guy is shutting my pc etc etc.....................or pay some insider of sify some bucks and get info abt this ip......or even dash through him
 


Sushubh

Administrator
Oct 29, 2004
421,852
13,193
Gurugram
if that guy is smart enough to launch an attack, he would be smart enough to not use his primary assigned ip. better keep yourself away from all this shit.
 
H

Helios

Originally posted by idiot@Jun 12 2005, 11:06 AM
Add the IPs/IP range in the Banned IPs list and relax.

Allow only urself in the Trusted IPs list.  :lol:
[snapback]12436[/snapback]
[/quote]

I think this is the safest and the best way to deny them access... :)
 

inetbum

Regulars
Regulars
Oct 30, 2004
1,039
1
On Windows if you don't need to share anthing with others on your LAN (like games etc., or chat with them through LAN ) then it's best to just disable your NetBIOS services which will disable the NetBIOS ports.

Here are the instructions to do it manually for--http://www.grc.com/su-bondage.htm

The basic funda of security is just don't run any services you don't need. And let those idiots do whatever they are doing. They won't be able to reach you. You know, when you have Zone Alarm running, it makes you invisible to the outside world. So the annoying script-kiddies that try to get to you might just think you're offline. However when you ping them back they know that you're online! So it may actually do you more harm.

Just don't bother "booting" or pinging unless you want to indulge in childish shoot 'em out games. And simply forget that your CTO will do anything about it. He simply doesn't care in my experience.
 


power

supersupersuper...
Regulars
Dec 19, 2004
1,349
4
Well on a lan no firewall can stop u from exposing urself to someone .. firewall disable icmp (pings) but on a lan u can very well know if other machin is up or not via arp bcoz no fwall stops arp packets ( most of them by defaults) .. Btw i am sure ports u are getting warning by zonealarm will be 1025,1032,445,135,139,etc and maybe 1433 if it is so then it most probably its a virus making some other pc as its host and trying to spread ...

All u need is WWDC

And dont worry much abt that warnings if u know how to update windows ;)
 

anand

Regulars
Regulars
Oct 25, 2004
315
0
Recently there has been a group of 7-8 computers suddenly attacking one computer. They all start and stop the same time. Probably a worm, one of those computers (my friends) had the Sify antivirus as well :lol: .
 

harinagar

Newbie
[OP]
Jun 12, 2005
2
0
I guess I'd rather not meddle with the bad guys. It might as well be some worm spreading through unsecured PCs. I have checked 'Do not show this message again', I will trust my ZoneAlarm. My PC is not sharing anything, so i have disabled NetBIOS.

inetbum: your link had directions for win98/NT, but i felt quite uneasy with them on XP, these were simpler - http://irt.stanford.edu/security/howto/disable-netbios.html


Rohit: All right, you guys. I hate to break this little party, but there are still a lot of bad guys out there(especially in Hari Nagar, Rohit's neighbourhood).
Firewall: Well, then let's go show the bad guys the police are back in force.
 

Similar threads