11 Jan
2001
11 Jan
'01
08:31
Raffy wrote:
137/TCP is the NETBIOS Name Service. So the remote mailserver might be a (misconfigured?) Windows-Box.
It's nothing dangerous, AFAIK.
But is this a thing one can configure or not? I would rather advise that admin to stop doing so than doing nothing.
It will not help you. What about simply denying NETBIOS? When I put my firewall online, the first probe I always get (within 30s) is 137/TCP NETBIOS. It comes from an address resolving in xyz.BROADCAST.MICROSOFT.it or equivalent (quoting from memory) All the best. -- Denis