Bordermanager and Netbios (port 1041)

Bordermanager and Netbios (port 1041)

Post by Jon-Ottar Run » Wed, 29 Nov 2000 04:00:00



We are using Novell Bordermanager WEB-Proxy to give people
internet-access. And, no, we do not use it as a firewall.
In the logs of the firewall, the proxy-server keeps sending
something to the firewall itself, on port 1041, NetBIOS i guess.

Does anyone know why it does this, and how i might make the Novell-boks
stop?

Thanks,
JonO

--

 
 
 

Bordermanager and Netbios (port 1041)

Post by Derek Morto » Wed, 29 Nov 2000 04:00:00


Don't guess, what is the line out of your logs

>We are using Novell Bordermanager WEB-Proxy to give people
>internet-access. And, no, we do not use it as a firewall.
>In the logs of the firewall, the proxy-server keeps sending
>something to the firewall itself, on port 1041, NetBIOS i guess.

>Does anyone know why it does this, and how i might make the Novell-boks
>stop?

>Thanks,
>JonO


 
 
 

Bordermanager and Netbios (port 1041)

Post by Jon-Ottar Run » Thu, 30 Nov 2000 04:00:00



Quote:>Don't guess, what is the line out of your logs

it says only, date,time etc, Service: NB-1041 (port 1041)
proxy-ip firewall-ip tcp and then what rule.

Fw1 only gives so much information in the pointy-clicky-GUI :-)

Jono

 
 
 

1. Flood on port #1041?! DDoS??

Within the latest hour Ive receive some strange packets from 4 different
IPs:

 #v+
16:10:32 13/02/00 194.168.242.212                          1041   1041
16:10:53 13/02/00 198.88.105.214                           1041   1041
16:10:57 13/02/00 203.166.231.65                           1041   1041
16:11:00 13/02/00 212.92.66.148                            1041   1041
#v-

Any idea??  Is this a error or a DDoS attack??

Kind regards
Kruse Security Advisement
http://home13.inet.tele.dk/kruse

2. rz/sz (Zmodem) for Unix and VAX/VMS updated on SIMTEL20

3. Netbios ports 137-139

4. Virus

5. Blocking NetBIOS ports

6. Satellite BBS

7. NIS 2002 help block netbios ports

8. bubble-gum cpu

9. Zonealarm Netbios name on port 10xx messages ??

10. Netbios ports 139 etc ... -

11. Should I block NetBIOS ports?

12. NETBios/Port 139/Dial Up Adapter/Ethernet

13. NetBIOS (NT) ports through a linux firewall