Security of enabling netbios over TCP/IP to create LAN using router

[keewaa]

Hi

I have been sharing my internet connection between 2 computers with a 4 port firewalled router, and now want to create a LAN between the 2 computers as well using the existing router and cabling. It seems fairly simple; configure each computer with netbios over TCP/IP, check they are in the same workgroup and then share whatever I want between the 2 computers.

However I always understood that this was a major security risk in previous versions of windows and was advised to unbind file and print sharing from TCP/IP. eg http://www.vtinfragard.org/protecting_home_systems.html


Can someone explain if I have missunderstood this, or if windows XP has changed from previous versions of windows for this now to be a secure way of file sharing via a router?

Thanks
K

 

[kyd]

Enabling file sharing is still pretty dangerous....all an attacker needs is your IP and scan to see if port 139 (netbios) is enabled then they could gain access to your shares.

all it takes is a few simple commands
nbtstat -a YOUR IP

this shows the Remote Machine Name Table will be displayed

net view \\203.195.136.156
to show the shared files/folders