From owner-freebsd-security Mon Nov 8 20: 5:26 1999 Delivered-To: freebsd-security@freebsd.org Received: from phoenix.volant.org (phoenix.volant.org [205.179.79.193]) by hub.freebsd.org (Postfix) with ESMTP id 809B714E54 for ; Mon, 8 Nov 1999 20:05:23 -0800 (PST) (envelope-from patl@phoenix.volant.org) Received: from asimov.phoenix.volant.org ([205.179.79.65]) by phoenix.volant.org with smtp (Exim 1.92 #8) id 11l2Wv-0002Zz-00; Mon, 8 Nov 1999 20:05:13 -0800 Received: from localhost by asimov.phoenix.volant.org (SMI-8.6/SMI-SVR4) id UAA25343; Mon, 8 Nov 1999 20:05:08 -0800 Date: Mon, 8 Nov 1999 20:05:08 -0800 (PST) From: patl@phoenix.volant.org Reply-To: patl@phoenix.volant.org Subject: Re: Port 137 hitting my server To: Mike Uttech Cc: security@FreeBSD.ORG, Chris Johnson , Lawrence Sica In-Reply-To: <19991109031211.EF813152E9@hub.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On 8-Nov-99 at 19:13, Mike Uttech (Mike@Zipoff.com) wrote: > This is caused by Internet Explorer 5. I remember running into this > annoying situation and after blocking it at the routers I figured out that > it was IE 5 doing it. I used to know why it was probing to see if NETBIOS > was running, but at the moment, I cannot remember it. It isn't just IE5; it seems to be Windows 95/98. My girlfriend's notebook generates them pretty much whenever it is running; and we've eliminated MSIE as much as possible on that machine in favor of Netscape. I looked into it a while back; and the consensus was that they are harmless and not even worth logging. -Pat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message