A possible scenario is that networked pc's behind your
firewall have a modem and connect to the internet via
an isp, they get an "exterior" address assigned and
something like a mail client tries to connect to your
company mail server which is inside the firewall.
It asks for a NetBIOS name resolution for the mail
server name and the request goes out the tcp/ip stack
as bound to the dial up interface, it then tries to
come in to the firewall to your wins/dns server.
Or your server gets the request and tries to reply to
the external ip address that the pc holds.
Peter Williams | Tel +61 3 5279 7456
Network support/Webmaster | Fax +61 3 5279 7414
Hendersons Industries | [EMAIL PROTECTED]
PO Box 4 Nth Geelong 3215 | http://www.hendersons.com.au/
> -----Original Message-----
> From: [EMAIL PROTECTED]
> On Behalf Of Markus Loeffler
>
> i am using Log File Auditing for checking my Firewall on intrusions.
>
> Currently i get connects to the unsecure Interface on the
> Firewall from
> several IP-Adresses on the Internet with source Port 137 to
> destination
> Port 137 , protocol is UDP.
>
> IANA Port-Assignment says :
>
> netbios-ns 137/tcp NETBIOS Name Service
> netbios-ns 137/udp NETBIOS Name Service
>
> but which Services uses that on the Internet ?
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
