Windows mystery udp/137 to udp/137

[Clyde Hoadley <hoadleyc () MSCD EDU>]

We have several Windows servers that regularly attempt to send udp packets
from port 137 to non existent IP address udp port 137.  These get
blocked by the firewall.  The Sys Admins haven't been able to figure
out why they do it.  Has anyone encountered this problem before?

Deny udp src inside:10.10.18.64/137 dst outside:169.254.221.242/137
Deny udp src inside:10.10.18.64/137 dst outside:169.254.221.242/137
Deny udp src inside:10.10.18.64/137 dst outside:192.168.81.1/137
Deny udp src inside:10.10.18.64/137 dst outside:192.168.81.1/137

--
Clyde Hoadley
Director of Information Security
Information Technology
Metropolitan State College of Denver
Campus Box 96, P.O. Box 173362, Denver Co 80217-3362
303-556-5074 | CELL 720-232-4737
www.mscd.edu