* port 137 entries
@ 2002-11-29 22:38 Martin Marques
2002-11-30 0:05 ` Joel Newkirk
2002-12-03 5:09 ` Dharmendra.T
0 siblings, 2 replies; 3+ messages in thread
From: Martin Marques @ 2002-11-29 22:38 UTC (permalink / raw)
To: netfilter
I'm getting lots of firewall logs informing me that packages with these
specifications where blocked:
scr-port 138, dest-port 138, dest IP <broadcast>
scr-port 137, dest-port 137, dest IP <broadcast>
scr-port 1029, dest-port 137, dest IP <my firewall IP>
Any thoughts? Is this Bug bear virus?
--
Porqué usar una base de datos relacional cualquiera,
si podés usar PostgreSQL?
-----------------------------------------------------------------
Martín Marqués | mmarques@unl.edu.ar
Programador, Administrador, DBA | Centro de Telematica
Universidad Nacional
del Litoral
-----------------------------------------------------------------
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: port 137 entries
2002-11-29 22:38 port 137 entries Martin Marques
@ 2002-11-30 0:05 ` Joel Newkirk
2002-12-03 5:09 ` Dharmendra.T
1 sibling, 0 replies; 3+ messages in thread
From: Joel Newkirk @ 2002-11-30 0:05 UTC (permalink / raw)
To: Martin Marques, netfilter
On Friday 29 November 2002 05:38 pm, Martin Marques wrote:
> I'm getting lots of firewall logs informing me that packages with these
> specifications where blocked:
>
> scr-port 138, dest-port 138, dest IP <broadcast>
> scr-port 137, dest-port 137, dest IP <broadcast>
>
> scr-port 1029, dest-port 137, dest IP <my firewall IP>
>
> Any thoughts? Is this Bug bear virus?
NetBIOS. You have MS machines on the network, right?
j
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: port 137 entries
2002-11-29 22:38 port 137 entries Martin Marques
2002-11-30 0:05 ` Joel Newkirk
@ 2002-12-03 5:09 ` Dharmendra.T
1 sibling, 0 replies; 3+ messages in thread
From: Dharmendra.T @ 2002-12-03 5:09 UTC (permalink / raw)
To: Martin Marques, netfilter
Don't have to worry about this as Ms machines are broadcasting. Just allow
these on your network or if you don't want to allow don't log all the logs
Regards,
Dharmendra.T
Linux Security Expert
www.nsecure.net
dharmu@nsecure.net
On Saturday 30 November 2002 04:08, Martin Marques wrote:
> I'm getting lots of firewall logs informing me that packages with these
> specifications where blocked:
>
> scr-port 138, dest-port 138, dest IP <broadcast>
> scr-port 137, dest-port 137, dest IP <broadcast>
>
> scr-port 1029, dest-port 137, dest IP <my firewall IP>
>
> Any thoughts? Is this Bug bear virus?
--
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2002-12-03 5:09 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-11-29 22:38 port 137 entries Martin Marques
2002-11-30 0:05 ` Joel Newkirk
2002-12-03 5:09 ` Dharmendra.T
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.