Check the DNS machine name for the WinDOZE machine. Generally, the DNS
name is the same as the NetBIOS name.
jeh
On Thu, 30 Mar 2000, Fred Wright wrote:
>
> On Thu, 30 Mar 2000, Iljitsch van Beijnum wrote:
>
> > What I see is that the PC contacts the DNS with 137 as the source port for
> > the request every 15 minutes, without any WINS <-> DNS mapping enabled:
> >
> > Mar 30 08:51:18: %SEC-6-IPACCESSLOGP: list 101 denied udp 213.156.0.10(53)
> > -> 213.156.3.172(137), 3 packets
> >
> > What's up with that??
>
> You can use MiamiTCPDump to see what it's trying to look up, though you
> may have to increase the capture length with -s.
>
> Are you sure WINS->DNS isn't enabled? It seems to be enabled by default,
> and I have yet to figure out what magic registry parameter controls it.
>
> The PC doesn't *always* use 137 as the source port - I think it may only
> do that when it's looking up a NetBIOS name. That could be useful for
> filtering purposes with some more clever software, but as it is I found it
> necessary to allow access to UDP 137 from my ISP's nameservers to keep the
> PC from being really slow at some lookups. It was trying to do things
> like look up <NetBIOS name>.<ISP domain>, which is obviously nonsense.
>
> Fred Wright
>
> --
>
> To unsubscribe send "unsubscribe miami-talk-ml" to
> "[EMAIL PROTECTED]". For help on list commands send "help" to
> "[EMAIL PROTECTED]".
>
>
>
>
>
--
To unsubscribe send "unsubscribe miami-talk-ml" to
"[EMAIL PROTECTED]". For help on list commands send "help" to
"[EMAIL PROTECTED]".
