From owner-freebsd-pf@FreeBSD.ORG Sun May 7 21:51:46 2006 Return-Path: X-Original-To: Freebsd-pf@freebsd.org Delivered-To: Freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B2EA616A401 for ; Sun, 7 May 2006 21:51:46 +0000 (UTC) (envelope-from solinym@gmail.com) Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.183]) by mx1.FreeBSD.org (Postfix) with ESMTP id 42FF443D55 for ; Sun, 7 May 2006 21:51:46 +0000 (GMT) (envelope-from solinym@gmail.com) Received: by py-out-1112.google.com with SMTP id e30so1229606pya for ; Sun, 07 May 2006 14:51:45 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=kXb/lbuvyFzsqfsgeDZ31f5nOpiupYWYcHZFSvDhZKu/Erx7A1o6TDfxcP8rTlY5pocWXcKExJmJI05DqV6gRIf+tJw80xurP78aogwCIgFY1v4p9Z6VXSMXyB0qoC9XpUxxcF0VaRFZLW8ZMECligbwzFXBbiDy91sd6MZwNiM= Received: by 10.35.37.18 with SMTP id p18mr2018638pyj; Sun, 07 May 2006 14:51:45 -0700 (PDT) Received: by 10.35.30.16 with HTTP; Sun, 7 May 2006 14:51:45 -0700 (PDT) Message-ID: Date: Sun, 7 May 2006 16:51:45 -0500 From: "Travis H." To: "Louis Kowolowski" In-Reply-To: <1147026144.1095.44.camel@localhost> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <20060507005418.63149.qmail@web31612.mail.mud.yahoo.com> <1147026144.1095.44.camel@localhost> Cc: Freebsd-pf@freebsd.org Subject: Re: Stranger addresses X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 May 2006 21:51:46 -0000 On 5/7/06, Louis Kowolowski wrote: > > I have some windows machine in my LAN, but I'd like to > > stop these packages on my network. I don't have DHCP. Are you saying that no machine on your LAN supports DHCP? I don't believe it. It's the default during installation for most OSes since it's simpler. > > > > 172.16.1.125.137 > > > > 172.16.1.125.138 > > > > > > If you're not using that subnet, then it's nbt > > > broadcast chatter. Yes, thats RFC 1918 class B addresses, ports 137 and 138 (Windows SMB traffic). To get rid of them, disable NetBIOS over TCP/IP in the windows client with the IPv4 address 172.16.125. You should also see a lot of 172.16.255.255 (subnet-directed broadcast), because SMB is almost totally dependent on broadcasts. I find it very annoying. They are NOT IPv6 packets. -- "Curiousity killed the cat, but for a while I was a suspect" -- Steven Wrig= ht Security Guru for Hire http://www.lightconsulting.com/~travis/ -><- GPG fingerprint: 9D3F 395A DAC5 5CCC 9066 151D 0A6B 4098 0C55 1484