Firewall rejecting port 137 netbios-ns

[Mark.Andrews at nominum.com]

	Port 137 is netbios-ns.  This windows name resolution.

	Mark

> 
> I'm not sure if this is bind related or not, and I can't seem to search for
> numbers in the list archive.
> 
> I see the following in my firewall log every so often.  But I don't see any
> corresponding "input" logs.  
> 
> Packet log: output REJECT eth1 PROTO=17
>      63.205.225.170:64961 165.87.156.173:137
>      L=78 S=0x00 I=16956 F=0x0000 T=127 (#42)
> 
> So either I'm allowing access to something by mistake, or some service I'm
> allowing access to is sending on UDP 137.  Is something in bind sending out
> these packets?
> 
> If it is bind, then what triggers it?
> 
> 
> 
> 
> Bill Moseley
> mailto:moseley at hank.org
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com