From owner-freebsd-security Wed Oct 28 15:02:22 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA29309 for freebsd-security-outgoing; Wed, 28 Oct 1998 15:02:22 -0800 (PST) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from phoenix.volant.org (phoenix.volant.org [205.179.79.193]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA29296 for ; Wed, 28 Oct 1998 15:02:18 -0800 (PST) (envelope-from patl@phoenix.volant.org) From: patl@phoenix.volant.org Received: from asimov.phoenix.volant.org ([205.179.79.65]) by phoenix.volant.org with smtp (Exim 1.92 #8) for security@freebsd.org id 0zYeav-0002Gm-00; Wed, 28 Oct 1998 15:01:37 -0800 Received: from localhost by asimov.phoenix.volant.org (SMI-8.6/SMI-SVR4) id PAA12303; Wed, 28 Oct 1998 15:01:35 -0800 Date: Wed, 28 Oct 1998 15:01:35 -0800 (PST) Reply-To: patl@phoenix.volant.org Subject: Cause of NetBIOS-NS requests from outside To: security@FreeBSD.ORG Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org I've recently started logging more of the packets which are denied by my filters. Since then, I've noticed occasional bursts of UDP packets aimed at the NetBIOS-NS port (137) on my primary server. Is this more likely to be M$ brain-damage, or an attempted probe by some script-kiddie? -Pat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message