Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 9 Nov 1999 13:29:15 -0700
From:      "Chris Wasser" <cwasser@v-wave.com>
To:        "Vladimir Dubrovin" <vlad@sandy.ru>, "Mike Pritchard" <mpp@mppsystems.com>
Cc:        <security@FreeBSD.ORG>
Subject:   Re: Re[2]: Port 137 hitting my server
Message-ID:  <001d01bf2af1$38b2f380$271a6c18@vwave.com>
References:  <19991109060320.B7018@mppsystems.com> <3779.991109@sandy.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message -----
> UDP  137  is a port for NetBIOS name resolution. Microsoft realization
> for IP->name resolution includes both DNS and netbios resolution.
Every
> time  you  connect to hosts running MS products (for example IIS)
> which  resolves  your  IP - host tries to resolve your NetBIOS name by
> sending UDP packet to your 137 port. Noone hacks you it's ok ;)

This is common knowledge.

> You're  wrong  if you think only MS products do things like that. E.g.
> sendmail  tries  to  check  your  name  via  authorization  (TCP  113)
> protocol.

Polling port 113 (identd) is one thing, NETBIOS name resolution is quite
another. Microsoft always wants to be different from everyone, including
by attempting to rewrite standards.

>  MCSE, MCP+I

Sorry to break the news to you, but those aren't worth the paper they're
printed on.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001d01bf2af1$38b2f380$271a6c18>