From owner-freebsd-security Mon Nov 8 19:12:16 1999 Delivered-To: freebsd-security@freebsd.org Received: from mail.negativezero.com (mail.negativezero.com [208.179.42.2]) by hub.freebsd.org (Postfix) with SMTP id EF813152E9 for ; Mon, 8 Nov 1999 19:12:00 -0800 (PST) (envelope-from Mike@Zipoff.com) Received: (qmail 10886 invoked from network); 9 Nov 1999 03:12:26 -0000 Received: from usimsptc11-209.usinternet.com (HELO jellyfish) (216.17.12.209) by mail.negativezero.com with SMTP; 9 Nov 1999 03:12:26 -0000 X-Sender: nz-zipoff@mail.negativezero.com (Unverified) X-Mailer: QUALCOMM Windows Eudora Pro Version 4.0 Date: Mon, 08 Nov 1999 21:07:33 -0700 To: security@FreeBSD.ORG, Chris Johnson , Lawrence Sica From: Mike Uttech Subject: Re: Port 137 hitting my server In-Reply-To: <19991108215515.A22452@palomine.net> References: <4.2.2.19991108155541.00bcba40@mail.interactivate.com> <4.2.2.19991108155541.00bcba40@mail.interactivate.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Message-Id: <19991109031211.EF813152E9@hub.freebsd.org> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org This is caused by Internet Explorer 5. I remember running into this annoying situation and after blocking it at the routers I figured out that it was IE 5 doing it. I used to know why it was probing to see if NETBIOS was running, but at the moment, I cannot remember it. Hope this helps, At 07:55 PM 11/8/99 , Chris Johnson wrote: >On Mon, Nov 08, 1999 at 03:57:01PM -0800, Lawrence Sica wrote: >> All, >> >> I keep getting hits to port 137 on my server. I know this is a netbios >> thing, and am not running samba. The server in question is a webserver. I >> was wondering any legitimate cause for this? > >I get zillions of these. I think that it's something that Windows does on its >own, unbeknownst to the person at the controls. I don't think that anyone is >intentioanlly probing anything. > >Chris > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > Mike Uttech Mike@zipoff.com System Administration Phone: 612-420-9655 Pager: 612-538-3886 -or- Page@zipoff.com Cell: 612-280-4327 Icq: 107438 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message