dslreports logo

One of the first tabs under "advanced" that you should explore is the one titled "Microsoft Networking." This tab contains settings that can make protecting your NetBios ports (137-139) a lot easier. If you have no LAN, check only the top level checkbox, leaving the others unchecked. This will block all traffic over your netbios ports entirely, in both directions.

Typical LAN configuration -- click here to view full size.


If you do use a LAN, you will need to make decisions, and the selections are pretty self-explanatory. You can opt to isolate the machine from the network by setting up exactly as you would for no LAN, or you can allow traffic at various levels.

The trusted range on this page is only used by the settings on the same page. It is not the same as a "custom address group," which is set up on its own tab. Best form is to substitute the actual, active IPs of your LAN machines as a range or a list. The default is to allow the entire subnet mask.

When it first runs, Tiny will generally prompt you to set up the default configuration for the LAN. There are two very important considerations when that prompt appears. First, if you have more than one NIC on the machine, make sure that you select the correct interface, the one that connects to your LAN's switch or hub. Second, decide what you want to do with NetBios traffic. Err towards being overly restrictive if in doubt. You can always adjust that part later in the Microsoft Networking tab settings behind the rule set.

021102-900


Expand got feedback?

by gwion See Profile edited by JMGullett See Profile
last modified: 2007-05-31 16:19:23