can i block windows milticast traffic on 137..139 ports (netbios)
without block any other multicast. I use netacc 
http://www.ak.planet.gen.nz/~richard/net-acct/
to log some traffic and this packets increase the log size up 5,6 time.
I try some like this
-A INPUT -m udp -p udp --dport 135:139 -j DROP 
-A INPUT -m tcp -p tcp --dport 135:139 -j DROP before other rules with policy drop
or even (that is not whole right)
-A PREROUTING -m udp -p udp --dport 135:139 -j DROP
-A PREROUTING -m tcp -p tcp --dport 135:139 -j DROP before other rules with policy drop
It is may be a problem with netbios and kernel ???
Thank you for advance

-----------------------------------
mailto:[EMAIL PROTECTED]
BR
Alexey Talikov
FORTEK
-----------------------------------





Reply via email to