OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: dgpinck.ch
Date: Thu Jan 11 2001 - 02:31:21 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Raffy wrote:

    >> 137/TCP is the NETBIOS Name Service. So the remote mailserver might be
    >> a (misconfigured?) Windows-Box.
    >>
    >> It's nothing dangerous, AFAIK.
    >
    >But is this a thing one can configure or not? I would rather advise that
    >admin to stop doing so than doing nothing.

    It will not help you.
    What about simply denying NETBIOS?
    When I put my firewall online,
    the first probe I always get (within 30s) is 137/TCP NETBIOS.
    It comes from an address resolving in
    xyz.BROADCAST.MICROSOFT.it or equivalent (quoting from memory)
    All the best. 

    --
Denis

    ---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com