From owner-freebsd-security  Thu Nov  5 11:59:21 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id LAA22654
          for freebsd-security-outgoing; Thu, 5 Nov 1998 11:59:21 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from commnet.accn.org (commnet.accn.org [207.73.64.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA22646
          for <FreeBSD-security@FreeBSD.ORG>; Thu, 5 Nov 1998 11:59:19 -0800 (PST)
          (envelope-from ryanm@accn.org)
Received: from accn.org (nt1.accn.org [207.73.64.8])
	by commnet.accn.org (8.9.1a/8.9.1) with ESMTP id OAA11388
	for <FreeBSD-security@FreeBSD.ORG>; Thu, 5 Nov 1998 14:58:52 -0500 (EST)
Message-ID: <36420344.FAEEF45E@accn.org>
Date: Thu, 05 Nov 1998 14:57:56 -0500
From: ryanm <ryanm@accn.org>
X-Mailer: Mozilla 4.5 [en] (WinNT; I)
X-Accept-Language: en
MIME-Version: 1.0
To: "FreeBSD-security@FreeBSD.ORG" <FreeBSD-security@FreeBSD.ORG>
Subject: netbios-ns requests
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Hello Freebsd Guru's,

In my day to day matters I have noticed several port 137 packets getting
nixed by
my firewall. In looking at some tcpdump output I have noticed the
following packets
originating here and destined for places on the Internet and some places
on the 
Internet destined for my internal network. I am curious what would cause
this
and how this can be disabled?? IS there a security issue out there
related to 
this type of traffic?? I have attached my tcpdump output below. If
anyone can
pass on any info related to these issues to me I would be appreciative.
If possible
email me back directly. Thanks very much for your info/help

Ryan

TCPDUMP OUTPUT FOR 3 PACKETS:
15:50:08.319069 X.X.X.X.netbios-ns > X.X.X.X.netbios-ns: udp 50 (ttl 32,
id 9475)
15:50:10.059069 X.X.X.X.netbios-ns > X.X.X.X.netbios-ns: udp 50 (ttl 32,
id 10499)
15:50:11.569069 X.X.X.X.netbios-ns > X.X.X.X.netbios-ns: udp 50 (ttl 32,
id 10755)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message