Firewall rejecting port 137 netbios-ns

[Bill Moseley]

I'm not sure if this is bind related or not, and I can't seem to search for
numbers in the list archive.

I see the following in my firewall log every so often.  But I don't see any
corresponding "input" logs.  

Packet log: output REJECT eth1 PROTO=17
     63.205.225.170:64961 165.87.156.173:137
     L=78 S=0x00 I=16956 F=0x0000 T=127 (#42)

So either I'm allowing access to something by mistake, or some service I'm
allowing access to is sending on UDP 137.  Is something in bind sending out
these packets?

If it is bind, then what triggers it?




Bill Moseley
mailto:moseley at hank.org