From: "Geo" 

"Hrvoje Mesing"  wrote in
message news:4363b47c{at}w3.nls.net...

> Firewall is not an option, BUT!, if Windows Firewall would recognize
> registered SMB Shares, then everything would have another "vector" of
usage
> :) Extend CIFS to get more usability, etc.
> "user based" share should share possibilities of "IP
based share"

In 1997 during the testing of W2K I got to meet with a bunch of the NT team
and I asked them why NT didn't have any hosts.allow/hosts.deny type
capabilities (IP based controls) beyond the base filtering capabilities.
The answer I got was that it didn't fit with their user based model.

At the time I didn't fully understand their point but I do today. It's got
nothing to do with the technical aspects, it's got to do with the licensing
aspects. Because of this, there is very little interest from MS in
providing IP based share access. It makes the per user charge model too
complex and opens too many loopholes (like a proxy could give thousands of
users access via one IP).

Geo.

--- BBBS/NT v4.01 Flag-5