IPv6 Firewall on CPEs - Default on or off

[Eric Vyncke (evyncke)]

Good point for the NAS indeed (even if I am not sure whether they support IPv6...)

But, I have just checked on my Win7 VM and there is nothing on ports 137-139

Anyway, we agree that this is mostly a detail anyway ;-)




Le 5 déc. 2012 à 12:31, "Phil Mayers" <p.mayers at imperial.ac.uk> a écrit :

> On 12/05/2012 07:05 PM, Eric Vyncke (evyncke) wrote:
>> OTOH, AFAIK Microsoft does not run netbios anymore (so no netbios
>> over IPv6 hence no need to block 137-139)
>> 
> 
> Are you sure about this? The windows 7 machine I have here at home says the same thing windows has said since w2k for "NetBIOS over TCP" in the IP->adapter bindings - to honour the DHCP-supplied config for NetBIOS-over-tcp, and to enable it if no setting is given or using static IPs.
> 
> Certainly a windows 7 machine here at home listens on port 135 by default. There's no port 139 listener, but I think that's because I've got no shares published.
> 
> There are, of course, lots of devices that listen on 139 that aren't windows machines (e.g. NASes) so I'd argue that 139 & 445 should be treated equivalently.