Firewall rejecting port 137 netbios-ns
Adam Olson
adamo at quaartz.com
Fri Jul 7 00:24:17 UTC 2000
I believe this is IIS trying to retrieve a hostname via NetBIOS when a
reverse lookup via DNS returns nothing.
Adam
On Thu, 6 Jul 2000, Bill Moseley wrote:
>
> I'm not sure if this is bind related or not, and I can't seem to search for
> numbers in the list archive.
>
> I see the following in my firewall log every so often. But I don't see any
> corresponding "input" logs.
>
> Packet log: output REJECT eth1 PROTO=17
> 63.205.225.170:64961 165.87.156.173:137
> L=78 S=0x00 I=16956 F=0x0000 T=127 (#42)
>
> So either I'm allowing access to something by mistake, or some service I'm
> allowing access to is sending on UDP 137. Is something in bind sending out
> these packets?
>
> If it is bind, then what triggers it?
>
>
>
>
> Bill Moseley
> mailto:moseley at hank.org
>
>
>
More information about the bind-users
mailing list