From owner-freebsd-security Wed Oct 28 15:25:09 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA02188 for freebsd-security-outgoing; Wed, 28 Oct 1998 15:25:09 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from ns.mt.sri.com (sri-gw.MT.net [206.127.105.141]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA02178 for ; Wed, 28 Oct 1998 15:25:05 -0800 (PST) (envelope-from nate@mt.sri.com) Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100]) by ns.mt.sri.com (8.8.8/8.8.8) with SMTP id QAA17268; Wed, 28 Oct 1998 16:24:22 -0700 (MST) (envelope-from nate@rocky.mt.sri.com) Received: by mt.sri.com (SMI-8.6/SMI-SVR4) id QAA13189; Wed, 28 Oct 1998 16:24:21 -0700 Date: Wed, 28 Oct 1998 16:24:21 -0700 Message-Id: <199810282324.QAA13189@mt.sri.com> From: Nate Williams MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: patl@phoenix.volant.org Cc: security@FreeBSD.ORG Subject: Re: Cause of NetBIOS-NS requests from outside In-Reply-To: References: X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > I've recently started logging more of the packets which are denied > by my filters. Since then, I've noticed occasional bursts of UDP > packets aimed at the NetBIOS-NS port (137) on my primary server. > > Is this more likely to be M$ brain-damage, or an attempted probe > by some script-kiddie? Both, but most likely M$ brain-damage. I see them *ALL* the time on my network, and I've learned to ignore them. :( Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message