From owner-freebsd-security Thu Oct 29 06:20:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id GAA27654 for freebsd-security-outgoing; Thu, 29 Oct 1998 06:20:51 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from alecto.physics.uiuc.edu (alecto.physics.uiuc.edu [130.126.8.20]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id GAA27649 for ; Thu, 29 Oct 1998 06:20:50 -0800 (PST) (envelope-from igor@alecto.physics.uiuc.edu) Received: (from igor@localhost) by alecto.physics.uiuc.edu (8.9.0/8.9.0) id IAA09817; Thu, 29 Oct 1998 08:20:40 -0600 (CST) From: Igor Roshchin Message-Id: <199810291420.IAA09817@alecto.physics.uiuc.edu> Subject: Re: Cause of NetBIOS-NS requests from outside In-Reply-To: <199810290542.WAA07783@harmony.village.org> from "Warner Losh" at "Oct 28, 1998 10:42:52 pm" To: imp@village.org (Warner Losh) Date: Thu, 29 Oct 1998 08:20:40 -0600 (CST) Cc: patl@phoenix.volant.org, nate@mt.sri.com, security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL43 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > In message patl@phoenix.volant.org writes: > : If it's doing a broadcast, why is the destination address the IP > : address of my server instead of one of the broadcast addresses > : for my network? Or is this Micro$oft's definition of 'broadcast'? > > Likely a badly configured client :-(. We get lots of traffic to > 204.144.255.255 from various people because of this MS misfeature. > > Warner > I don't know if this helps, but when you are setting up a new WinNT (and I assume, 95/98 does the same) - when you are setting the TCP/IP - you enter IP, host name, domain name, .. If you have, say you host 204.144.103.22, and gateway is 204.144.102.1, Windows will "suggest" (and set) the mask to be 255.255.0.0, and unless you change it to what you need (255.255.254.0 in my case) - your host might be broadcasting (I didn't check it, but it should, if the network configuration allows, and the router/switch does not filter this packets out) to 204.144.255.255. IgoR To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message