Re: port 138

William Anderson <[email protected]> Mon, 04 Oct 2004 23:44:23 +0100

Newsgroups	gmane.comp.security.firewalls.smoothwall.general
Message-ID	<[email protected]>

Eric wrote:
> Hi.  I'm using smoothy for for the first time for my home LAN and am
> very impressed.  I did a port scan though and found this:
> 
> UDP 137 : FILTERED    No response packet was received.
> UDP 138 : OPEN    The port is open.
> UDP 139 : FILTERED    No response packet was received.
> 
> NetBIOS/Samba?.  I am using neither, have not opened that port and do
> not see it listed as open.  Suggestions?  Thanks for any tips!

It's more likely that your ISP is intercepting these packets upstream of you 
to help prevent infection by worms.  You may find the open port is a 
honeypot filtered upstream to help slow infection attempts.

-- 
_ __/|  William Anderson      | Brodie: The Force is strong with this one
\`O_o'  neuro at well dot com |    Jay: Dude, don't encourage him
=(_ _)= http://neuro.me.uk/   |  -- Mallrats, (1995)
    U  - Thhbt! GPG 0xFA5F1100 |
_______________________________________________
gpl mailing list
[email protected]
http://lists.smoothwall.org/mailman/listinfo/gpl

SmoothWall Stash - Buy Our Stuff! http://cafepress.com/smoothwall