logging of port 137 in private net

I just looked at my PacketFilter Violation Livelog in 1.9, and there's a bunch of entries about port 137 broadcasts from my windows workstation.

ISTM that there is no need to log such things on the internal network, as that is normal traffic, not a Violation.

Thanks,
Barry

Parents

0 Darryl Smith over 23 years ago

I posted my standard config somewhere a week or two ago. What I would suggest is to define your BROADCAST addresses in the form of BROADCAST 1, BROADCAST 2, etc.

Then I created rules that any packets that go to BROADCAST 1, type of 137 get DROPPED.

DROPPED does not mean DELETE, just do nothing

Darryl
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Darryl Smith over 23 years ago

I posted my standard config somewhere a week or two ago. What I would suggest is to define your BROADCAST addresses in the form of BROADCAST 1, BROADCAST 2, etc.

Then I created rules that any packets that go to BROADCAST 1, type of 137 get DROPPED.

DROPPED does not mean DELETE, just do nothing

Darryl
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data