IP address appears in Kerio FW - advice please...

[bahjan]

Hi,

Sorry if this an exceedingly dumb question, but I set my alert on my Kerio Free firewall 2.1.5 to 'Ask me First' and now I keep getting this message:

Someone from 192.168.1.32, port 138 wants to send UDP datagram to port 138 owned by 'SYSTEM' on your computer.

I've denied it so far - but I have no way of identifying the IP address to ascertain what rule I should set in future. ie permit or deny.

I am running Win 98se of a home broadband router

Can anyone enlighten me as to this activity and what I should do about it Please?:)

[Pedro]

192.168.1.x is tipically a home network address. You router is probably 192.168.1.1 . Do you have other computers on your network?

Port 138 is used by NetBios. It's used for file sharing on your home network.
http://www.grc.com/port_138.htm
http://en.wikipedia.org/wiki/NetBIOS

If you don't need file sharing, you can block it. Certainly do not allow it for WAN (internet).

[Eagle Creek]

As Pedro said, it's perfectly fine if you are using file sharing in an LAN environment.
If you don't use file sharing, you can either block or allow.