MIDRANGE dot COM Mailing List Archive



MIDRANGE-L » March 2013

Re: Security: NetBIOS Shared Folder List Available



Turn off browse announcements in the netserver config.

It will require a restart of the NetServer.

Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects


On 3/4/2013 6:38 AM, rob@xxxxxxxxx wrote:
Apparently people who do not even have an IBM i account can open up
Windows explorer on their PC and point it to
\\youribmi
and see your list of shares. Now, they can't access them without an IBM i
account (unless you set up Guest access). But our Qualys internal
security scan lets us know that this is of some concern because it may be
enough to encourage someone to try a brute force attack to get into them.
They consider this a middle of the road concern.

Is there some way to turn off showing the list of shares to those users
without an IBM i account?

If this was running Windows I could follow the recommendation of the
report and do a couple of steps and it would be done.


Rob Berendt
-- IBM Certified System Administrator - IBM i 6.1 Group Dekko Dept 1600 Mail to: 2505 Dekko Drive Garrett, IN 46738 Ship to: Dock 108 6928N 400E Kendallville, IN 46755 http://www.dekko.com
--





Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2013 by MIDRANGE dot COM and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available here. If you have questions about this, please contact