RE: Shared drives through a firewall

If you're worried about connection security, just use a VPN.  Or better
yet, if the servers are both Win2K or better, use IPSec.  IPSec is
Microsoft's recommended solution for extending domain communications to
another LAN across the Internet.  I've read the KB article on it, but
don't have time to look for it right now.

If you're worried about the "untrusted" server messing with your
network, make sure to restrict the user account that the server is using
to access your network.  Even if the 3rd party server is untrustworthy,
you should be able to implement a secure access policy that gives that
server access to only the files it needs.  And make sure to have a good
backup policy in place in case the 3rd party server deletes/destroys
data.

Or if live access to the files isn't required, you could set up DFS to
replicate the files to their network (over a secure connection, of
course).

Bryan Ponnwitz

-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of aeheald@gmail.com
Sent: Thursday, March 22, 2007 10:46 AM
To: focus-ms@securityfocus.com
Subject: Re: Shared drives through a firewall

The configuration is actually:
 trusted  >>fw>>fw>>untrusted >>fw>>internet.

I haven't found a lot on the web that could help me specifically, so any
pointers would be useful. 

They are using 137 and 139 outbound to do these connections.

 Thanks for what's come forward so far!

Eigen