Yup. That's coz NBT packets are broadcast packets, and say you have a class C
network. Your firewall is only one out of 254 addresses and it will not log the
broadcast packet to the firewall (because you stated any NBT to the firewall drop),
but will log those packets that are directed to other hosts in that class C network.
cheers.
James Oryszczyn wrote:
> The rule should read any--any--nbt drop. Netbios broadcasts and it
> might not talk directly to the firewall. That is why it is in the logs.
>
> jamesory
> ----- Original Message -----
> From: Tika Mahata <[EMAIL PROTECTED]>
> Date: Wednesday, June 14, 2000 10:19 pm
> Subject: Re: [FW1] nbdatagram, nbname and nbsession
>
> >
> > Hi zinc
> >
> > I think the rule applying may be different than what
> > you expect.Pls check other rules.
> >
> > Tika
> > --- zinc zdj <[EMAIL PROTECTED]> wrote:
> > >
> > > Hi everybody,
> > >
> > > This is my first rule rule:
> > >
> > > any firewall nbdatagram drop
> > > nbsession
> > > nbname
> > >
> > > The problem is that it keep log even though I ask
> > > not to? Any pointer is
> > > appreciated. Thanks in advance
> > >
> > > zinc
> > >
> > >
> >
> ________________________________________________________________________
> > > Get Your Private, Free E-mail from MSN Hotmail at
> > > http://www.hotmail.com
> > >
> > >
> > >
> > >
> >
> ========================================================================
> ========
> > > To unsubscribe from this mailing list, please
> > > see the instructions at
> > >
> > > http://www.checkpoint.com/services/mailing.html
> > >
> >
> ========================================================================
> ========
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Yahoo! Photos -- now, 100 FREE prints!
> > http://photos.yahoo.com
> >
> >
> >
> ========================================================================
> ========
> > To unsubscribe from this mailing list, please see the
> > instructions at
> > http://www.checkpoint.com/services/mailing.html
> >
> ========================================================================
> ========
> >
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
