Ports 135-139 (and I think 445) are Netbios ports.
Port 113 is auth/identd.
IMHO, it makes sense to not let these in through your
firewall.
-Anne
jjj3 grabbed a keyboard and typed...
>
> Ok, but if the port is 137.... is that a problem?
>
> jjj3
>
> Andy Coates writes:
>
> > > Hi All,
> > >
> > > Logs in my firewall shows me incoming connections to port 113 of the
> > > firewall!! What it means?
> >
> > Some service you or your computer is connecting to is checking your
> > ident. Disable the identd daemon or comment out the entry in inetd.conf
> > if you do it that way.
> >
> > Usually happens when you IRC, or some FTP sites check. Don't recall a
> > vulnerability for it.
> >
> > Andy.
> >
>
>
> --
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
.-"".__."``". Anne Carasik, System Administrator
.-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu
(O/ O) \-' ` -="""=. ', Center for Advanced Computing Research
~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Attachment:
pgpmIIOy0udfC.pgp
Description: PGP signature