[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] RaQ 4 Falling Over



> 2.The Kernel log is filled with a huge amount of denial to port 137 (see
> snap shot)

Port 137 is netbios and is usually caused by Win32 boxes on your network.

netbios-ns      137/tcp    NETBIOS Name Service    
netbios-ns      137/udp    NETBIOS Name Service    
netbios-dgm     138/tcp    NETBIOS Datagram Service
netbios-dgm     138/udp    NETBIOS Datagram Service
netbios-ssn     139/tcp    NETBIOS Session Service
netbios-ssn     139/udp    NETBIOS Session Service

I've added the following lines in my ipchains rules above the onmass reject and log line.

-A input -p tcp -s 0/0 -d 0/0 137:139 -j DENY
-A input -p udp -s 0/0 -d 0/0 137:139 -j DENY

Brett
B3K.net - Webmaster / Hostmaster
---------------------------------------------
The World's premier mobile phone boutique
With free SMS & free personal No's
www.b3k.net