netbios name query sent out wrong interface om multihomed system
Hi, We have a multihomed server 2008r2. It has one interface connected to our lan (range 192.168.10.*) and one interface connected to a customer network (range 192.168.174.*). Now I notice on the firewall that is connected to our lan that this server is sending netbios name queries (udp:137) to addresses in the 192.168.174.* range, which is directly connected. Why does the server send the name query for a directly connected network to the internet for name resolution ? Regards, Hen
September 8th, 2011 9:03am

Multihoming a server always causes problems with Netbios. Disable Netbios on all but one interface is the best solution. If you want Netbios resolution across a routed network, run a WINS server. This will allow the browser service to work across routers (as long as you have at least one DC). Bill
Free Windows Admin Tool Kit Click here and download it now
September 8th, 2011 8:03pm

I disbled netbios on all but the one interface connected to the lan. It does not make any difference however. It keeps sending netbios name requests for hosts on the other interface. Kind regards, Hen
September 11th, 2011 3:37pm

Hi Hen, Thanks for posing here. You may also try to block the outbound NetBIOS name query traffic for specific interfaces on this multihomed host by defining Windows Firewall rules: Firewall Rules System service name: Browser Application protocol Protocol Ports NetBIOS Datagram Service UDP 138 NetBIOS Name Resolution UDP 137 NetBIOS Session Service TCP 139 Thanks. Tiger Li Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
September 11th, 2011 8:34pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics