/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
SoloCDM wrote:
> I'm getting many udp port requests through ipchains on
> 137/netbios-ns. Is this the port NTs use for the nameservers or
> is it a cracker?
>
> Note: When you reply to this message, please include the mailing
> list/newsgroup address in Cc: and my email address in To:.
it's used for smb (file/print sharing, network browsing). it's either
a cracker looking for easy windows hosts to break into, or, more likely,
stray packets leaking out of a windows host connected to the
same isp as you. if it was a hacker they would probably have given up
on your host by now (since their packets are being dropped).
raf
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
