Re: Odd UDP ports blocked
- From: "Peter J. Persing" <Peter@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 12 Sep 2001 16:51:47 -0600
How can UDP 137/138 (NetBios name service/Datagram Service) get through
if he has net bios over TCP/IP turned of on the external network
interface as he should have.
Pete
On the Blackfoot River in the great state of Montana
-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Wednesday, September 12, 2001 3:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
Well, my ISP is @home. The ip in question isn't an @home based network
ID.
It belongs to the netblock of linklocal, but that's about all I can find
out about it.
Regards,
Mark
----- Original Message -----
From: Jim Harrison <mailto:jim@xxxxxxxxxxxx>
To: [ISAserver.org Discussion List] <mailto:isalist@xxxxxxxxxxxxx>
Sent: Wednesday, September 12, 2001 5:22 PM
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
Someone on your ISP side of things has a Windows 98SE or higher OS that
is using AIPA and is still trying to get an address from a DHCP server.
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: Mark <mailto:strangconst@xxxxxxxx> Strangways
To: [ISAserver.org Discussion List] <mailto:isalist@xxxxxxxxxxxxx>
Sent: Wednesday, September 12, 2001 13:08
Subject: [isalist] Odd UDP ports blocked
http://www.ISAserver.org
Included below is a clip from my Packet filter log. I understand that is
is NOT getting thru, but does
anyone think I should be informing someone of the attack.
Or am I just paranoid ?
Thanks in advance for your responses
Mark
2001-09-12 19:28:22 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:32 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:38 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:42 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:28:52 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:02 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:06 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:07 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:08 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:09 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:11 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:13 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:14 169.254.97.143 169.254.255.255 Udp 137 137 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:29:30 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:31:00 169.254.97.143 169.254.255.255 Udp 138 138 - BLOCKED
24.43.154.219
2001-09-12 19:31:30 169.254.97.143 169.254.255.255 Udp 138 138
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
