Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 7 Mar 1998 17:48:56 -0500 (EST)
From:      spork <spork@super-g.com>
To:        Blaine Minazzi <bminazzi@w3page.com>
Cc:        David Babler <root@Rigel.orionsys.com>, freebsd-isp@FreeBSD.ORG
Subject:   Re: Port 137 access - somebody monkeying around?
Message-ID:  <Pine.BSF.3.96.980307174516.12182A-100000@super-g.inch.com>
In-Reply-To: <35007AFA.475951E5@w3page.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> Bullshit. Sounds like He was trying to break into an NT box, or attack
> through SAMBA. 

Easy there!  Set up a windows box on your lan and sniff for a while;
you'll see that the stupid thing does this on it's own.  Another poster
explained it in more detail earlier.  Basically if netbios is bound to
tcp/ip, the windows box tries to "chat" with the remote end to get MS name
info...  Stupid, but harmless.

You can find more about this and the estimates on combined bandwidth waste
on the nanog mailing list archives, www.nanog.org...

Charles

> 
> > Am I being too paranoid?
> 
> You can NEVER be too paranoid, esp. on the net.
> 
> Next time it happens, contact the ISP, and tell them that the user is
> trying to hack into your server.
> 
> Good luck,
> 
> Blaine
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-isp" in the body of the message
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.980307174516.12182A-100000>