From: Bede Hackney (bhackney@xxxxxxxxxxxxxxxxxxx)
Date: Tue Oct 03 2000 - 02:25:27 GMT-3
Hi,
I'm looking into DLSW & Netbios sap filtering and I notice that when Netbios
sends explorers they always seem to originate from ssap F0 but sometimes
they have dsap 00 and sometimes they have dsap F0. Can anyone fill in what
circumstances lead to the each of the dsap's???
My understanding is that if you are trying to filter out all Netbios traffic
then all you need is the following applied as an lsap filter:
access-list 200 deny 0xf0f0 0x0101
access-list 200 permit 0x0000 0xffff
What I am not understanding here is that if there is a explorer with ssap F0
and dsap 00 then won't the above access list allow that packet through??
Thanks heaps,
Bede.
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 08:25:23 GMT-3