sicon wrote: > mngt defen
Usage:: defenseworm [?|on|off|add port|del port|viewlog|clearlog]
Defense Worm Packet Out is OFF!!
Block TCP port list: 135, 137, 138, 139, 445

This doesn't appear to be an option anywhere in the 2960's shell.
It was worth a shot though

Changing from PPTP (which doesn't appear to route anything at all!) to IPSec has made no difference to NetBIOS.

No default netBIOS -> DNS rule (circa the 2920) on the 2960.

Disabling DOS - Fraggle has made no difference.
Disabling DOS has made no difference.

Adding in a Firewall filter for NetBios and RPC (ports 137,138 UDP, 139 TCP/UDP, 135, 445 TCP) has made no difference.
-> Permitting on any interface made no difference.
-> Specifying source and destination IPs made no difference.
-> Specifying subnets made no difference.
n.b. At no point was a rule match message sent to syslog either.

it sounds like you have tired everything now...

I reckon an Email to Support will be the next step but Highlight all the above that you have tried!