Yes, this port is used by SMB.
netbios-ns 137/tcp NETBIOS Name Service
netbios-ns 137/udp NETBIOS Name Service
netbios-dgm 138/tcp NETBIOS Datagram Service
netbios-dgm 138/udp NETBIOS Datagram Service
netbios-ssn 139/tcp NETBIOS Session Service
netbios-ssn 139/udp NETBIOS Session Service
I guess it is possible someone maybe knock at your door, but I cannot say
with certainty. You can use ipchains to deny access to this port or if
your system is multihomed and you are running Samba, I'd suggest bind it
to one IP address (your internal).
SoloCDM wrote:
> I'm getting many udp port requests through ipchains on
> 137/netbios-ns. Is this the port NTs use for the nameservers or
> is it a cracker?
>
> Note: When you reply to this message, please include the mailing
> list/newsgroup address in Cc: and my email address in To:.
>
> *********************************************************************
> Signed,
> SoloCDM
--
This email was routed through The Twilight Zone.
