Re: Firewall rule closed ALL but Port UDP 137 open

From:
Date: 10/30/02


Date: Wed, 30 Oct 2002 12:35:30 GMT

On Wed, 30 Oct 2002 04:26:49 +0300, Tracker spoketh

>
>
>NeoSadist wrote:
>
>> "Markus Dubois" <Markus.Dubois@gmx.ch> wrote in message
>> news:186d15f6.0210300045.77aeba03@posting.google.com...
>> > Hi,
>> >
>> > on my home internet PC (Win98 Shared internet access, firewalled with
>> > Norton Internet Security 2002) a nmap scan shows port udp 137 open.
>> > Even if i make a rule on top with
>> > block all any any
>> >
>> > Very odd situation. There is nothing open according to my
>> > firewall-rule but nmap shows this open port......
>> >
>> > Why?
>> >
>> > Regards
>> >
>> > Markus
>>
>> Uh, if you're scanning YOURSELF, it will probably show that open because you
>> have norton antivirus using that port as a sort of email proxy with which to
>> scan inbound emails. It's normal. If an internet-based scan shows it open,
>> that's different.
>> Uh, oops, that's netbios over tcp/ip. You're sharing the internet, so it's
>> gonna look open.
>
>Norton anti-virus has nothing to do with open Port 137 for file and print
>sharing, nor does an email proxy run on port 137.
>Sounds fishy to me.
>
>Tracker
>
>

The product is Norton INTERNET security, not Norton Anti-Virus.

Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'lars' in e-mail address)



Relevant Pages

  • Re: Firewall rule closed ALL but Port UDP 137 open
    ... >> on my home internet PC (Win98 Shared internet access, ... >> firewall-rule but nmap shows this open port...... ... Norton anti-virus has nothing to do with open Port 137 for file and print ... nor does an email proxy run on port 137. ...
    (comp.security.firewalls)
  • IE6 Ceased Working
    ... I installed SP2 a month ago with no problems. ... I have 12/29/2004 virus definitions form Norton Anti-Virus & Internet ... Internet connection/firewall have no problems using IE. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Internetverbindung
    ... mich ins Internet, aber kann keine Seite im Internet Explorer bzw Mozilla ... aufmachen, obwohl Pakete gesendet und empfangen werden. ... Updates gemacht, hab Norton Anti-Virus und Firewall inaktiv. ...
    (microsoft.public.de.german.windowsxp.networking)
  • Re: download.trojan.file ref 243813.exe
    ... Did you say yes to any download warning messages? ... > 2) Cleared Internet explorer History file and Scanned Windows/Temporary ... > Norton Anti-virus ?? ... > NB remove {nospam.} filter to reply ...
    (microsoft.public.security.virus)
  • Re: Linux als Router
    ... # Enter all trusted network interfaces here. ... # which should be available to the internet and set FW_ROUTE to yes. ... space separated list of ports, ... # Packets to silently reject without log message. ...
    (de.comp.os.unix.linux.misc)