----- Original Message -----
From: "Alex M" <radiussupport at lrcommunications dot net>
To: "Monowall Support List" <m0n0wall at lists dot m0n0 dot ch>
Sent: Sunday, April 16, 2006 2:00 PM
Subject: [m0n0wall] Bloking NetBios
>I was trying to hide every computer on the network so I set rule for LAN to
> LAN block ports UDP 137, 138 TCP 139, 445. I moved thise tules to the
> higher priority then allow any to any, but all comps still can see each
> other, why? What should I do?
The rules only work on traffic that is passing through m0n0wall. If you
have your PCs connected to a switch before the m0n0wall then of course they
will see each other - the traffic never reaches or goes through m0n0wall.
LAN to LAN will not work because this local traffic does not pass through
the m0n0wall. if you want to do this you need to use VLANs or separate
physical interfaces for each PC. Another option is to use a managed switch
on which you can set up port segregation or port based VLANs.