Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 2 subscribers
  • Views 5069 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

netbios (UDP 137/138)

Mike_C
I have a slight annoyance with UDP 137/138. No matter what I do, I get a UDP Drop message on ALL hits from my internal network on ports 137/138. I even created a new service specifically for these UDP ports (the service is there but for both TCP/UDP) to see if it was a service rule issue. Nope, still banging away dropping them. I don't use it, but it does create quite a lot of log entries (dumb Windows ME box generates tons of messages). Anyone have any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    to get rid of those messages I just addaed a new network called "broadcast" with the broadcast ip/255.255.255.255.

    Then I added the packet filter rule:

    internal_net { netbios } broadcast drop

    this way my log is really cleaner.

    anyway I'm still in need of some help for this related problem.

    Regards
Reply
  • 0
    to get rid of those messages I just addaed a new network called "broadcast" with the broadcast ip/255.255.255.255.

    Then I added the packet filter rule:

    internal_net { netbios } broadcast drop

    this way my log is really cleaner.

    anyway I'm still in need of some help for this related problem.

    Regards
Children
No Data
Unfiltered HTML