PDA

View Full Version : Any good reason to disable broadcasts (p-node)?


soverythirsty
2006-06-08, 06:48 AM CDT
This is more a general network / network security issue than a linux-specific issue, but I don't know of a better community to ask...

Is there any good (sensible, smart, actual security issue, etc) reason to force clients connecting to your network to p-node (node type 2)? The only real effect of this force (done by the DHCP server) is to disable netbios broadcasts (send and receive) on the client.

Now I bold that because it's really important... forcing the node type breaks windows clients. The change is static and can only be changed by another DHCP force (off-the-shelf routers won't do it) or a registry tweak (edit my what now?). Or reinstalling windows... but the user didn't expect to have to do that again for at least another 6 weeks...

So, why would a network administrator (let's imagine a really, really big network) want to disable broadcasts? Just a control freak? A legitimate virus/worm concern? So-called "broadcast storms?"

I ask because I've encountered this, but the network admin won't give me a straight story and I'd like to brainstorm what he's hiding...

Thanks for any input.