LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Non-*NIX Forums > General
User Name
Password
General NOTE: The general forum has been closed to new posts while we evaluate moderator availability. This forum is for non-technical general discussion which can include both Linux and non-Linux topics. Have fun!

Notices


 
  Search this Thread
Old 06-24-2002, 11:05 AM   #1
ugenn
Member
 
Registered: Apr 2002
Posts: 549

Rep: Reputation: 30
Security in Windows Network neighborhood


I have 2 windows boxes hooked up via ethernet cards and using shared folders. When the machines are connected to the Internet via dial-up, are the folders visible to others across the 'net?

Another question,
the 2 machines are using static assigned IP addresses,
is it possible that the ip will clash with another when the machine is dialed-in to the net? for that matter, which datalink interface does the system know to use?
 
Old 06-24-2002, 03:00 PM   #2
Stephanie_new
Member
 
Registered: May 2002
Location: Hell, A.K.A. Arizona
Distribution: MD 8x / WIN2K / QNX
Posts: 156

Rep: Reputation: 30
Just for you and my own curiosity, I asked one of my companies network admins about this.

Yes, if someone hacked your PC, then they would be able to see and work with your networked drives. Also, any computer attached to it could be vulnerable as well.

Now I am not completely sure, but as long as each machine has a unique IP address assigned, they should not clash.
 
Old 06-24-2002, 04:58 PM   #3
KevStA
Member
 
Registered: Dec 2001
Location: Birmingham, UK
Distribution: Red Hat 7.2
Posts: 96

Rep: Reputation: 15
The answer to this question is simply yes.

Windows comes with tools to view remote shares, goto dos prompt a type net view \\host.

heres what happens when i do it inside my network,

Quote:
C:\WINDOWS>net view \\dad
Shared resources at \\DAD

Sharename Type Comment
---------------------------------------
PADDYS DRIVE Disk
The command was completed successfully.
This is, however not a security flaw, because passwords and levels of security should be set before going onto the internet. For some commands on howto use net.exe , goto a dos prompt and type net help, and you'll see the commands you can issue. You might want to disable netbios as your ip can be added to an attackers lmhosts.sam, and they can just browse your computer by using their find files in their start menu, they could also print to your shared printer. From loging onto your machine, they can also view shared drives inside your network. Get a firewall, hardware or software..it doesn't matter too much, as long as you can filter the ports/ips etc to your liking.

Anyway, i'm babling on a bit now, i best shutup.

2)sorry cant help.
 
Old 07-12-2002, 02:10 AM   #4
mrdensity
Member
 
Registered: Apr 2002
Location: Central US
Distribution: Libranet 1.9.1 & 2.0, tinyX (2dskxwin) & WinLinux 2001
Posts: 83

Rep: Reputation: 15
YES - they can ! They can write to and delete from them as well. Windows has almost No security with shared folders or net services.
NT/2000 has "Remote Registry" running by default. Shared folders are the EASIEST exploit on the web. That is the reason "Code Red" and "nimdA" present such a security risk. They enabled Guest logins, set their priveldge to "Administrator" and unset the password for the account.
Right click on Network Neighborhood (from Windows Desktop) select properties and then unbind "File and Printer sharing" for your dial up connection. You might even be able to get away with unbinding "netbios" from tcp/ip on the dial up too. but if you arent able to connect to the net your ISP is requiring it to verify you on their network. You might do a little reading on http://grc.com about this very subject. He has very good detailed instructions about unbinding these protocols from your net connection. Dont forget to turn off "Universal Plug and Play". It is an active server on port udp port 1900 and TCPIP port 5000. Run "netstat -a -n 20" in a dos window and see what shows.
MAKE CERTAIN that you do not unbind TCPIP from your net conection or you will not connect at all.

Last edited by mrdensity; 07-12-2002 at 02:49 AM.
 
Old 07-12-2002, 01:06 PM   #5
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,696

Rep: Reputation: 232Reputation: 232Reputation: 232
Re: Security in Windows Network neighborhood

Quote:
Originally posted by ugenn

Another question,
the 2 machines are using static assigned IP addresses,
is it possible that the ip will clash with another when the machine is dialed-in to the net? for that matter, which datalink interface does the system know to use?
That's why you should always assign your machines local IPs (for example 192.168.1.x). Then there will be no problem.
 
  


 


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
is there something like a NETWORK NEIGHBORHOOD? ghanalinux Linux - Newbie 6 06-18-2005 12:37 PM
network neighborhood johnorban Linux - Networking 7 01-19-2004 07:27 PM
Network Neighborhood for Linux allelopath Linux - Software 3 04-30-2003 09:18 AM
network neighborhood joshuajameswoma Linux - Networking 4 09-25-2002 12:17 AM
Wheres the network neighborhood? Ůmegaflops Linux - Networking 1 06-11-2002 09:11 PM

LinuxQuestions.org > Forums > Non-*NIX Forums > General

All times are GMT -5. The time now is 02:40 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration