Re: UDP port 137 Question

[Bryce Ryan <brycer () organic com>]

My mailer says that Melody Yoon said:
> Hi Jon. If memory serves, Netbios nameservices are generally only on the
> same segment unless you have an NT/Samba server somewhere... As it is, it
> should *NOT* be directed at your Unix boxes and definately not coming
> across the Internet. My guess is that someone may be attempting a bad OOB
> data attack on port 137 thinking that your Unix box is some type of PC.

who was it that said, "never attribute to malice what can be explained by
stupidity?"

we run a web farm and see requests directed at port 137 all the time on
the web sites we host.  i don't know for certain, but i assume it is 
some sort of internet explorer "feature" that is attempting to establish
a CIFS connection to the web site.  we ignore them anyway. 

-- 
=== bryce ryan ============ organic  ======== brycer () organic com =========
==== director =========== information ===== http://www.organic.com/ ======
== /etc/networks ========== services === v:415.278.5652#f:415.284.6891 ===