Recently while analyzing log data, I've noticed an absolutely large number
of denials to port 137, udp
Somehow I just can't believe that all of these individual hosts are after
port 137, because it just seems like there's too mnay of them. It could
be; we're quite visible, but I have to wonder if this is a side effect of
users connecting with microsoft internet explorer, because it is, after
all, netbios name service.
Anyone seen this on their DMZ ?
-john
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
