Subject: Re: random connections on TCP port: 139
To: Mipam <mipam@ibb.net>
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
List: tech-security
Date: 09/11/2000 18:43:27
  by mail.netbsd.org with SMTP; 11 Sep 2000 16:42:00 -0000
	by rfhs8012.fh-regensburg.de (8.10.1/8.10.1) with ESMTP id e8BGfD019962;
	Mon, 11 Sep 2000 18:41:13 +0200 (MET DST)
Date: Mon, 11 Sep 2000 18:43:27 +0200 (MET DST)
From: Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>
To: Mipam <mipam@ibb.net>
cc: Tony Hernadez <tony@cne-inc.com>,
   "'tech-security@netbsd.org'" <tech-security@netbsd.org>
Subject: Re: random connections on TCP port: 139
In-Reply-To: <20000911183655.B437@ibb0021.ibb.uu.nl>
Message-ID: <Pine.GSO.4.21.0009111842360.29497-100000@rfhpc8320.fh-regensburg.de>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

On Mon, 11 Sep 2000, Mipam wrote:
> But as i understood is that his hosts.deny file was going really big.
> I guess then it's time starting to think on ip filter?
> On the other hand, no service is running under port 139 so, no need to worry
> indeed.
> It remains a personal choice of course.

Sure - I think a check on
 1. basic understanding on how inetd works and
 2. what's in hosts.deny 
would be appropriate...


 - Hubert

-- 
Hubert Feyrer <hubert.feyrer@informatik.fh-regensburg.de>