I have been ask by our security people to address the following issues on My Netware 6.5 servers:

Null Session Share Enumeration

NetBIOS Null Session Enabled

Novell NetWare Core Protocol (NCP) Null Query Enumeration

I have looked at filtcfg and it looks like I can block port 137-139 over tcp (netbios service). What are the implications of blocking this port? I also need to block port 445, but did not see it listed.

For the NCP problem security says I need to block port 524, however I thought this was necessary to have this port open so the server could replicate to each other.

Any information on the issues would be greatly appreciated.