Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Oct 1998 15:05:37 +0300
From:      ark@eltex.ru
To:        sec@42.org
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: Cause of NetBIOS-NS requests from outside
Message-ID:  <199810301205.PAA08404@paranoid.eltex.spb.ru>
In-Reply-To: <19981030102625.B2255@matrix.42.org> from "Stefan `Sec` Zehl <sec@42.org>"

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----

nuqneH,

I am not very familliar with netbios protocol, could you please write
an sample program to do this ;)?

Stefan `Sec` Zehl <sec@42.org> said :

> On Thu, Oct 29, 1998 at 06:44:30PM +0100, Thomas Stromberg wrote:
> > If you enable "Windows resolution through DNS" in NT (there is a similar
> > setting in Windows95/98), every TCP access that machine ever makes sends a
> > NetBIOS-ns (137) packet to try to find out its Windows equivalent name to
> > store in its cache.
> 
> Has anybody tried to reply to this packets with an equivalent of
> 'FIX-YOUR-SETUP' as name ?
> 
> CU,
>     Sec
> -- 
> Wunder von Microsoft I:
> Ich habe mal eine Testmaschine nach einer Neuinstallation rebootet. Sie
> blieb aber mit "No processors found" stehen. -- <Marcus@nero.rhein-main.de>
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message
> 

                                    _     _  _  _  _      _  _
 {::} {::} {::}  CU in Hell          _| o |_ | | _|| |   / _||_|   |_ |_ |_
 (##) (##) (##)        /Arkan#iD    |_  o  _||_| _||_| /   _|  | o |_||_||_|
 [||] [||] [||]            Do i believe in Bible? Hell,man,i've seen one!

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNjmrjqH/mIJW9LeBAQEojwP+OUKtxq2ja6iETlC+xCnCWqMtoe7AYpii
T9ovWdVRgNdhn2a2ceuwD/6ue6YifMz7b4jthHGK1sr/hU/HZNrbvzYGCyg+aJ4p
R4ZI2IUz2bnGStxRrYrNoMq8oEO1n2n7e+xyavhRfT/4rXbLNOE7hf2JcWonwWLs
mheKAIXDL64=
=th7c
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199810301205.PAA08404>