RE: [SLE] Network security
Bill, :Anyone know what people are trying when they try to connect to port 137? You may want to check out the thread that starts here: http://www.linux.ie/pipermail/ilug/1999-September/006064.html Thom -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
"Farrell, Thom" wrote:
Bill,
:Anyone know what people are trying when they try to connect to port 137?
You may want to check out the thread that starts here: http://www.linux.ie/pipermail/ilug/1999-September/006064.html
Thom
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
/etc/services sayes port 137 is netbios-ns (Net Bios Name Server). Rusty -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
On Fri, 26 May 2000, Farrell, Thom wrote: tf> Bill, tf> tf> :Anyone know what people are trying when they try to connect to port 137? tf> tf> You may want to check out the thread that starts here: tf> http://www.linux.ie/pipermail/ilug/1999-September/006064.html tf> Isn't port 137 used for identing, typically when connecting to IRC. tf> Thom tf> tf> -- S.Toms - tomas@primenet.com - www.primenet.com/~tomas SuSE Linux v6.3+ - Kernel 2.2.14 -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
Ports 137, 138 and 139 are used by NetBIOS for name resolution and smb services... you've got Windows boxes trying to "browse" your system. - Herman "S.Toms" wrote:
On Fri, 26 May 2000, Farrell, Thom wrote:
tf> Bill, tf> tf> :Anyone know what people are trying when they try to connect to port 137? tf> tf> You may want to check out the thread that starts here: tf> http://www.linux.ie/pipermail/ilug/1999-September/006064.html tf>
Isn't port 137 used for identing, typically when connecting to IRC.
tf> Thom tf> tf>
-- S.Toms - tomas@primenet.com - www.primenet.com/~tomas SuSE Linux v6.3+ - Kernel 2.2.14
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
Herman Knief tapped away at the keyboard with:
"S.Toms" wrote:
On Fri, 26 May 2000, Farrell, Thom wrote: tf> :Anyone know what people are trying when they try to connect to port 137? tf> tf> You may want to check out the thread that starts here: tf> http://www.linux.ie/pipermail/ilug/1999-September/006064.html tf>
Isn't port 137 used for identing, typically when connecting to IRC.
Ports 137, 138 and 139 are used by NetBIOS for name resolution and smb services... you've got Windows boxes trying to "browse" your system.
For more information, please visit the CERT web page. Look at the section on port scans and their known exploits. http://www.cert.org -- Bernd Felsche - Innovative Reckoning Perth, Western Australia -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
participants (5)
-
bernie＠innovative.iinet.net.au -
herman＠knief.net -
irisinc＠gci.net -
TFarrell＠fallschurch.esys.com -
tomas＠primenet.com