Re: pf behaviour with tcp ports 439 and

Jon Hart <[email protected]> Thu, 10 Sep 2009 22:56:26 -0700

Newsgroups	gmane.os.openbsd.pf
Message-ID	<[email protected]>

My guess is that you meant 139/TCP instead of 439/TCP, in which case
this is pretty much on par for many residential ISPs and their
blocking of typical problematic ports.

My suggestion?  Re-run shields-up (for what its worth) and run a
capture on $ext_if with an appropriate filter and I'd bet you don't
see any inbound 139 or 445.

-jon