Re: Security: NetBIOS Shared Folder List Available

[Vernon Hamberg <vhamberg@xxxxxxxxxxxxxxx>]

Rob

This is security by obscurity, but you can rename all shares, putting a 
dollar-sign after them - this makes them hidden in a casual listing in 
Explorer.

It would probably break something, such as the /QIBM share, and that one 
does include /QIBM/UserData, which could be open to attack - the stuff 
in ProdData, etc., is less critical to secure, I would guess.

HTH
Vern

On 3/4/2013 6:38 AM, rob@xxxxxxxxx wrote:
> Apparently people who do not even have an IBM i account can open up
> Windows explorer on their PC and point it to
> \\youribmi
> and see your list of shares.  Now, they can't access them without an IBM i
> account (unless you set up Guest access).  But our Qualys internal
> security scan lets us know that this is of some concern because it may be
> enough to encourage someone to try a brute force attack to get into them.
> They consider this a middle of the road concern.
>
> Is there some way to turn off showing the list of shares to those users
> without an IBM i account?
>
> If this was running Windows I could follow the recommendation of the
> report and do a couple of steps and it would be done.
>
>
> Rob Berendt