Date: Wed, 28 Oct 1998 20:55:53 -0700 From: Nate Williams <nate@mt.sri.com> To: patl@phoenix.volant.org Cc: Kenneth Ingham <ingham@i-pi.com>, security@FreeBSD.ORG Subject: Re: Cause of NetBIOS-NS requests from outside Message-ID: <199810290355.UAA14862@mt.sri.com> In-Reply-To: <ML-3.3.909620404.495.patl@asimov> References: <19981028171202.A4585@i-pi.com> <ML-3.3.909620404.495.patl@asimov>
next in thread | previous in thread | raw e-mail | index | archive | help
> > > I've recently started logging more of the packets which are denied > > > by my filters. Since then, I've noticed occasional bursts of UDP > > > packets aimed at the NetBIOS-NS port (137) on my primary server. > > > > > > Is this more likely to be M$ brain-damage, or an attempted probe > > > by some script-kiddie? > > > > M$ brain-damage. ... > So it's probably trying to contact my DNS server via NetBIOS-NS > protocol? Nope, it's doing a 'broadcast' on port 137, and it may have even gotten a reponse from a machine inside your network, depending on how you have your firewall setup. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810290355.UAA14862>