[ale] Firewalling question

[Christopher R. McNabb]

That might be the case, Yes it is a cable modem, and lo and behold the
techsupport at Cablevision knows NOTHING!  Mention Linux and they tried to
get me off the phone saying unsupported. Bah!  Ah well, it's getting denied,
so I guess I'll just ignore it.

Christopher R. McNabb
MindSpring Technical Support
____________________________________________

http://www.mindspring.net
http://help.mindspring.com
http://www.mindspring.net/~web
support at mindspring.com         800.719.4664
crmcnabb at mindspring.net
____________________________________________

*NOTE* ALL Requests for Technical Support
will be redirected to support at mindspring.com
____________________________________________



----- Original Message -----
 From: Gary Maltzen <maltzen at mm.com>
To: Christopher R. McNabb <ilive at mindspring.com>
Cc: "ALE List" <ale at ale.org>
Sent: Wednesday, May 05, 1999 5:08 PM
Subject: Re: [ale] Firewalling question


> Ports 137/138/139 are NetBIOS/SMB/Samba network requests.
>
> First guess: you've got a DSL or cable connection to the Internet, shared
by
> other users who have chosen 192.168.1 for their private intranet as well -
> but they may not have firewalled their systems...
>
> -----Original Message-----
> From: Christopher R. McNabb <ilive at mindspring.com>
>
>
> I'm using SuSE 5.3 and have setup Firewalling and Masquerading.  All seems
> to work fine, but I'm seeing strange entries in my logs.
>
> May  2 09:19:37 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:137
> 192.168.1.255:137 L=78 S=0x00 I=11008 F=0x0000 T=32
> May  2 09:19:37 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
> 192.168.1.255:138 L=217 S=0x00 I=12032 F=0x0000 T=32
> May  2 09:19:38 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
> 192.168.1.255:138 L=217 S=0x00 I=13056 F=0x0000 T=32
> May  2 09:19:39 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
> 192.168.1.255:138 L=244 S=0x00 I=13312 F=0x0000 T=32
> May  2 09:19:39 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
> 192.168.1.255:138 L=217 S=0x00 I=14080 F=0x0000 T=32
> May  2 09:19:40 gateway kernel: IP fw-in deny eth0 UDP 192.168.1.2:138
> 192.168.1.255:138 L=217 S=0x00 I=15104 F=0x0000 T=32
>
>
> This IP 192.168.1.2 does not exist on my network.  I also see other
entries
> with other IP addresses.  This has started since I set the machine up, so
I
> figure it is just a config setting somewhere.  Can anyone help me out
here?
> port numbers are almost always 137 or 138, and occasionally 513.  Always
> UDP.
>
>
>