From owner-freebsd-security Fri Oct 30 04:07:56 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA26840 for freebsd-security-outgoing; Fri, 30 Oct 1998 04:07:56 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from hosting.doublesquare.com (hosting.doublesquare.com [195.5.128.151]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA26832 for ; Fri, 30 Oct 1998 04:07:52 -0800 (PST) (envelope-from ark@eltex.ru) From: ark@eltex.ru Received: from eltex.ru (eltex-spiiras.nw.ru [195.19.204.46] (may be forged)) by hosting.doublesquare.com (8.8.8/8.8.8) with ESMTP id PAA01081; Fri, 30 Oct 1998 15:06:49 +0300 (MSK) Received: from border.eltex.spb.ru (root@border.eltex.ru [195.19.198.2]) by eltex.ru (8.8.8/8.8.8) with SMTP id PAA02280; Fri, 30 Oct 1998 15:08:12 +0300 (MSK) Received: by border.eltex.spb.ru (ssmtp TIS-0.5alpha, 19 Oct 1998); Fri, 30 Oct 1998 15:07:29 +0300 Received: from undisclosed-intranet-sender id xma001833; Fri, 30 Oct 98 15:07:01 +0300 Date: Fri, 30 Oct 1998 15:05:37 +0300 Message-Id: <199810301205.PAA08404@paranoid.eltex.spb.ru> In-Reply-To: <19981030102625.B2255@matrix.42.org> from "Stefan `Sec` Zehl " Organization: "Klingon Imperial Intelligence Service" Subject: Re: Cause of NetBIOS-NS requests from outside To: sec@42.org Cc: freebsd-security@FreeBSD.ORG Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- nuqneH, I am not very familliar with netbios protocol, could you please write an sample program to do this ;)? Stefan `Sec` Zehl said : > On Thu, Oct 29, 1998 at 06:44:30PM +0100, Thomas Stromberg wrote: > > If you enable "Windows resolution through DNS" in NT (there is a similar > > setting in Windows95/98), every TCP access that machine ever makes sends a > > NetBIOS-ns (137) packet to try to find out its Windows equivalent name to > > store in its cache. > > Has anybody tried to reply to this packets with an equivalent of > 'FIX-YOUR-SETUP' as name ? > > CU, > Sec > -- > Wunder von Microsoft I: > Ich habe mal eine Testmaschine nach einer Neuinstallation rebootet. Sie > blieb aber mit "No processors found" stehen. -- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQCVAwUBNjmrjqH/mIJW9LeBAQEojwP+OUKtxq2ja6iETlC+xCnCWqMtoe7AYpii T9ovWdVRgNdhn2a2ceuwD/6ue6YifMz7b4jthHGK1sr/hU/HZNrbvzYGCyg+aJ4p R4ZI2IUz2bnGStxRrYrNoMq8oEO1n2n7e+xyavhRfT/4rXbLNOE7hf2JcWonwWLs mheKAIXDL64= =th7c -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message