How to block network discovery?

rado3105 · Apprentice Joined: 14 Jul 2007 Posts: 293

Is possible to block network discovery? I dont want from people on my network to see each other(using various programs...) or to know architecture of network....

Hu · Administrator Joined: 06 Mar 2007 Posts: 23066

Yes. Configure your switch to disallow passing traffic on the relevant discovery protocols.

rado3105 · Apprentice Joined: 14 Jul 2007 Posts: 293

so there is enough to block udp port 1900? or any other?

Inodoro_Pereyra · Posted: Sat Jan 02, 2010 10:17 pm Post subject:

And by network discovery you are talking of...?

You can block uPNP, SSDP, SNMP Netbios broadcasts and any other protocol you can think on using firewalls o routing between hosts but you can't block ARP traffic for example, or your box will be isolated from the net.

A little more info would be useful.

Cheers!
_________________
Mi Blog.

Si no fuera por C, estaríamos escribiendo programas en BASI, PASAL y OBOL.

rado3105 · Apprentice Joined: 14 Jul 2007 Posts: 293

I want to disable discovery samba(but not if client has specific ip, just discovery), discovery network(and computers on network - using various tools like mikrotik dude..), and what is recomended. I dont want block services, just discovering ....of services using various tools..

Bircoph · Posted: Sun Jan 03, 2010 6:44 am Post subject:

rado3105 · Apprentice Joined: 14 Jul 2007 Posts: 293

Just part of network is bridged, all connections goes through routers, so I dont need ebtables. Just need to know what is good to block(what ports, I just found 1900udp port).

Hu · Administrator Joined: 06 Mar 2007 Posts: 23066

What do you hope to accomplish by this blocking?