From owner-freebsd-security Tue Aug 18 20:06:00 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA04485 for freebsd-security-outgoing; Tue, 18 Aug 1998 20:06:00 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from mail.pinboard.com (mail.pinboard.com [194.209.195.7]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA04477 for ; Tue, 18 Aug 1998 20:05:58 -0700 (PDT) (envelope-from Kurt@pinboard.com) Received: (from uucp@localhost) by mail.pinboard.com (8.8.8-19984P01-KK/8.8.8-19984D01-KK) with UUCP id FAA23315 for freebsd-security@FreeBSD.ORG; Wed, 19 Aug 1998 05:03:53 +0200 (CEST) (envelope-from Kurt@pinboard.com) Received: from chibi (chibi.pbdhome.pinboard.com [192.168.0.3]) by squirrel.pbdhome.pinboard.com (8.9.1/8.9.1-19980817-01/KK) with SMTP id WAA27664 for ; Tue, 18 Aug 1998 22:54:39 +0200 (CEST) (envelope-from: Kurt@pinboard.com) Message-Id: <3.0.5.16.19980818221708.1a172ab4@pop.pbdhome.pinboard.com> Organization: PINBOARD - http://www.pinboard.com/ X-Sender: kurt@pop.pbdhome.pinboard.com X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.5 (16) Date: Tue, 18 Aug 1998 22:17:08 To: freebsd-security@FreeBSD.ORG From: Kurt Keller Subject: Re: Port 137 (was: Re: private network on router's external NIC?) In-Reply-To: <19980818105321.58178@i-pi.com> References: <35D8A7E8.2DC50695@partitur.se> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-PINBOARD-SpamCheck: v19984P01/KK Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org >Except that Newbios-NS (137) port lookups come from machines with >WINS turned on doing web browsing. I tracked this down after I To me it seems web servers send out packets to port 137 as well. Not using WINS internally and browsing through a double proxy connection, we filter out lots of _incoming_ packets to port 137. From one site there are also such packets at night, when nobody is surfing. Contacting their administrator I was told that at night they process access and routing statistics on a WIN box. Oh, how much bandwith we'd save without those MS-boxes... Kurt -- Kurt@pinboard.com http://www.pinboard.com/ business http://www.pinboard.com/kurt/ private To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message