NETBIOS/MS_DS

[opnsensetech]

I am attempting to block NetBios (137-139) and MS DS (445) both inbound and outbound at the firewall and am not having much luck. Search did not find me what I was looking for. We do not use IPv6.

The firewall is in a classroom lab on the university network and needs access to some other servers so blocking the 10/8 and 192/16 cannot work. VLAN is also not an option at this time, so please just answer the question as it is asked and not offer solutions I cannot use.