PDA

View Full Version : outgoing 137 to 137


trekie12cat
April 12th, 2007, 02:02 AM
i have noticed "file and printer sharing" "full app path calls it netbios in the log" outgoing conntection in my firewall log.
udp port 137 to port 137 "64.212.100.109" "64.215.162.26" "64.215.162.35" "64.215.162.8" "64.215.162.80" are the destion ip's. i was using maps.yahoo.com and printing them from firefox. avg anti-spyware free installed and updated only cookies found. avast updated. yahoo toolbar norton anti-spyware updated and found nothing.

Stem
April 12th, 2007, 06:15 PM
Hello, Welcome to wilders.

What you are seeing is a function of file/print sharing, this function should be restricted to trusted/LAN only.

More info please:

What is your OS (XP?)
What is your setup? Is the printer on LAN or connected by USB/printer port?
What is your firewall?

trekie12cat
April 16th, 2007, 03:45 AM
windows xp sp2
my printer is on usb
firewall is kerio

"drweb cureit and norton kaspersky online scans see nothing"
avg 7.5 as see's nothing.
and i do not see it happening any more.
it just seems to be that one time.

Stem
April 16th, 2007, 10:39 PM
Which version of Kerio are you using, as we will need to change your firewall rules or settings.

trekie12cat
April 17th, 2007, 02:08 PM
4 kerio personal

Stem
April 17th, 2007, 02:35 PM
Open Kerio-> Network Security -> Applications Tab.

Look down the list and find "Microsoft File and Print sharing"(This may be named "netbios" depending on the view), change the settings of this to "Deny" In/out for Internet. If you are connected directly to the Internet (no LAN/router) then also set "Deny" In/out" for trusted.

trekie12cat
April 23rd, 2007, 11:25 PM
thanks