Deny port 137-139 on the internal interface of your firewall. Its probably some sort of broadcast across 137. Best plan of action is to disable, er better yet, remove netbios from your Windoze platforms unless you deem it necessary to use Microcraps network sharing "feature".
-----Original Message-----
From: Scott Holmes
To: [EMAIL PROTECTED]
Sent: 3/8/01 1:30 PM
Subject: Outbound attemps, port 61000 -> 137 ?
I spotted some denied outbound attempts from my firewall's external IP
to a 169.254.X.X address. The source port was 61000 and the destination
was 137. 61000 is IP Masqurading and 137 is NetBios right? I was not
trying to access a netbios share over the net, what's going on?
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
