Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   Networking (https://www.cableforum.uk/board/forumdisplay.php?f=87)
-   -   wrt54gc ?'s (https://www.cableforum.uk/board/showthread.php?t=52070)

tony 03-09-2006 18:59

wrt54gc ?'s
 
Excuse if these seem dumb questions, just setup this router and at moment with just 1 pc connected, setup ok all working well, setup security page for router with all enabled, test via sygate/grc says all stealth.
I have software firewall and checking log notice many inbound blocked from router for port 137 (nbname).
I have netbios disabled.
Where are these coming from.
Tried googling but after reading many many pages cannot find anything realting to this.
Thanks for any enlightenment.

Graham M 03-09-2006 19:20

Re: wrt54gc ?'s
 
It'll be people "testing the water" to see if there are any vulerable ports open

pedantic 03-09-2006 19:31

Re: wrt54gc ?'s
 
Quote:

Originally Posted by Zeph (Post 34109201)
It'll be people "testing the water" to see if there are any vulerable ports open

If the OP's router is already set up to block and stealth the ports, the router will do just that, before anything reaches a software firewall. It sounds like it's just the router making an enquiry, to see what devices are attached. It won't be a scan from anyone from the outside world, nothing to worry about IMO.

tony 03-09-2006 19:40

Re: wrt54gc ?'s
 
Quote:

Originally Posted by pedantic (Post 34109214)
If the OP's router is already set up to block and stealth the ports, the router will do just that, before anything reaches a software firewall. It sounds like it's just the router making an enquiry, to see what devices are attached. It won't be a scan from anyone from the outside world, nothing to worry about IMO.

Thanks for the clarification, had sort of thought that but as a newbie to routers wanted to ensure that all was ok.

pedantic 03-09-2006 19:43

Re: wrt54gc ?'s
 
Quote:

Originally Posted by tony (Post 34109224)
Thanks for the clarification, had sort of thought that but as a newbie to routers wanted to ensure that all was ok.

Your software firewall log should tell you the souce ip address, where the intrusion is coming from. If the ip is the router's ip (192.168.1.1 for example) then I wouldn't worry too much.

tony 03-09-2006 20:09

Re: wrt54gc ?'s
 
Quote:

Originally Posted by pedantic (Post 34109226)
Your software firewall log should tell you the souce ip address, where the intrusion is coming from. If the ip is the router's ip (192.168.1.1 for example) then I wouldn't worry too much.

Yep it is coming from router ip, as it don't get past the software firewall it is no problem and anyway netbios is disabled, just like to know what is going on with this stuff, all adds to the learning process, or paranoia. lol.
Sorted.


All times are GMT +1. The time now is 13:46.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2025, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum