Date: Thu, 29 Oct 1998 08:20:40 -0600 (CST) From: Igor Roshchin <igor@physics.uiuc.edu> To: imp@village.org (Warner Losh) Cc: patl@phoenix.volant.org, nate@mt.sri.com, security@FreeBSD.ORG Subject: Re: Cause of NetBIOS-NS requests from outside Message-ID: <199810291420.IAA09817@alecto.physics.uiuc.edu> In-Reply-To: <199810290542.WAA07783@harmony.village.org> from "Warner Losh" at "Oct 28, 1998 10:42:52 pm"
next in thread | previous in thread | raw e-mail | index | archive | help
> In message <ML-3.3.909633943.1367.patl@asimov> patl@phoenix.volant.org writes: > : If it's doing a broadcast, why is the destination address the IP > : address of my server instead of one of the broadcast addresses > : for my network? Or is this Micro$oft's definition of 'broadcast'? > > Likely a badly configured client :-(. We get lots of traffic to > 204.144.255.255 from various people because of this MS misfeature. > > Warner > I don't know if this helps, but when you are setting up a new WinNT (and I assume, 95/98 does the same) - when you are setting the TCP/IP - you enter IP, host name, domain name, .. If you have, say you host 204.144.103.22, and gateway is 204.144.102.1, Windows will "suggest" (and set) the mask to be 255.255.0.0, and unless you change it to what you need (255.255.254.0 in my case) - your host might be broadcasting (I didn't check it, but it should, if the network configuration allows, and the router/switch does not filter this packets out) to 204.144.255.255. IgoR To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810291420.IAA09817>