If any of your LAN based resources are exposed to the Internet or to other TCP/IP based network segments that may be linked to the Internet, it would be in your best interest to unbind TCP/IP from File and Printer sharing services, and use NetBEUI in stead.

What we have outlined below also applies to those using IPX/SPX. All you need to do differently would be to enable NetBIOS over IPX/SPX, substitute "IPX/SPX" for "NetBEUI" in the following instructions, and you will be good to go.

Setting up NetBEUI protocol for file and Printer sharing is not difficult -it can just be a bit time-consuming and tedious if you have several computers that needs to be reconfigured and rebooted. It is important, however, that you unbind TCP/IP and bind NetBEUI on every single computer on your LAN because all it takes is one vulnerable computer to let an intruder sneak in.

The main benefit of using NetBEUI for File and Printer sharing is the fact that it is a non-routable protocol.

In other words, NetBEUI based computers (or PDAs, APs, etc.) that are NOT located on the same LAN segment/subnet can not be accessed (across disjoint LAN segments) for their shared resources.

Therefore, you should seriously consider using NetBEUI (in stead of TCP/IP) for sharing your LAN based resources -especially if:

• Your LAN is Directly Linked to the Internet: There are times when every computer on a LAN needs to be connected to the Internet using publicly routable IP addresses. In other words, those computers will now be seen/reached directly from the outside -the Internet. Considering Internet connectivity is based on TCP/IP, if you happen to enable TCP/IP based sharing of any resources on your computers (File & Printer sharing, etc.), you could potentially be sharing those resources with the entire Internet. Using strong passwords in a situation like that may stall the intruders for a while, but if an intruder is motivated enough, your content (shared using TCP/IP) will eventually be compromised.