IP address appears in Kerio FW - advice please...

Discussion in 'other firewalls' started by bahjan, Jan 30, 2008.

Thread Status:
Not open for further replies.
  1. bahjan

    bahjan Registered Member

    Joined:
    May 18, 2007
    Posts:
    63
    Location:
    U.K.
    Hi,

    Sorry if this an exceedingly dumb question, but I set my alert on my Kerio Free firewall 2.1.5 to 'Ask me First' and now I keep getting this message:

    Someone from 192.168.1.32, port 138 wants to send UDP datagram to port 138 owned by 'SYSTEM' on your computer.

    I've denied it so far - but I have no way of identifying the IP address to ascertain what rule I should set in future. ie permit or deny.

    I am running Win 98se of a home broadband router

    Can anyone enlighten me as to this activity and what I should do about it Please?:)
     
    bahjan, Jan 30, 2008
    #1
  2. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    192.168.1.x is tipically a home network address. You router is probably 192.168.1.1 . Do you have other computers on your network?

    Port 138 is used by NetBios. It's used for file sharing on your home network.
    http://www.grc.com/port_138.htm
    http://en.wikipedia.org/wiki/NetBIOS

    If you don't need file sharing, you can block it. Certainly do not allow it for WAN (internet).
     
    Pedro, Jan 30, 2008
    #2
  3. Eagle Creek

    Eagle Creek Global Moderator

    Joined:
    Jul 27, 2004
    Posts:
    734
    Location:
    The Netherlands
    As Pedro said, it's perfectly fine if you are using file sharing in an LAN environment.
    If you don't use file sharing, you can either block or allow.
     
    Eagle Creek, Jan 30, 2008
    #3
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...