Have you disabled FindFast ??
At 05:04 AM 4/5/2000 , Daniel Crichton wondered...
>I've got one NT 4 Workstation here that is showing a strange "attack" pattern
>against one (maybe others, still investigating) of my stand alone NT Servers.
>Every 2 hours, starting 2 hours after the workstation is turned on, it attempts
>to login to the server 4 times, 5 seconds between each login, and fails as the
>workstation user account does not have access rights on the server. I have
>tried shutting down all applications and still the workstation does the same
>thing. Has anyone else ever heard of or seen this before? Any idea what I
>should be looking for? I can't see anything out of place in the list of
>processes on the workstation, and there is no reason for it to be doing this.
>The only non-OS applications running are NAI VirusScan NT 4.0.3a and
>Novell Workstation Manager. I can't see anything in the configurations of
>either of these that would explain this sort of behaviour. A netstat -n on the
>machine shows ports 1025, 1026, 1027, and 1028 connected to each other,
>and connections to port 139 on other NT Servers to which the user has
>access rights.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
