This is NetBIOS traffic. ISA is blocking Computer Browser service broadcasts and name resolution requests from going outside, a VERY good thing. BTW, %systemroot%/system32/drivers/etc/services is a nice place to check for port descriptions for anything below 10000. Brad Benz MCSE, CCNA, CCDA, CIPT inTouch Solutions Voice/Data Integration Engineer 208.947.6786 bbenz@xxxxxxxxxxxxxxxxxxx -----Original Message----- From: Rogers, Brian [mailto:RogersB@xxxxxxxxxxxxxx] Sent: Tuesday, February 05, 2002 10:53 AM To: [ISAserver.org Discussion List] Subject: [isalist] UDP 137 http://www.ISAserver.org Anyone know what would be using this port? The system that's spitting out thousands of requests is a Lotus Notes SMTP Mail Gateway. It is configured as a published web server thru ISA...but ISA is blocking all its attempts to connect to various systems using UDP 137. Its certainly not mail...as all the servers functions are acting just fine. Brian W. Rogers MCSE, MCT, MCP Client/Server Network Developer Tree of Life Corporation rogersb@xxxxxxxxxxxxxx office: (904)940-2152 mobile: (904)806-7173 ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: bbenz@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')