Re: [cobalt-users] Port 137 Scans

[Jonathan Nichols <jnichols@xxxxxxxxxxxxxxxxx>]

> > of course, you could have known it yourself:
> > [shimi@shimi shimi]$ cat /etc/services | grep 137
> > netbios-ns      137/tcp                         # NETBIOS Name Service
> > netbios-ns      137/udp   
>
> I'm not quite sure how to interpret the above...  Are we running NETBIOS
> services on the RaQ's? Do we need to worry about the network.vbs worm or
> can we "unguard" port 137 safely and just let in the machines who are
> attempting to connect via that port?
137 is for Windows File Sharing - firewall it out, or just let 
portsentry block it.

There's really no reason for a Windows box to be trying file sharing 
with a Cobalt RaQ...


--
-Jonathan Nichols
System Administrator
http://www.sitesthatsell.com
jnichols@xxxxxxxxxxxxxxxxx