TCP 445 no longer blocked! [Archive]

Matth

05-09-2004, 22:36

The Server message block / Microsoft_DS (TCP 445) was one of the NTL blocked ports - I am now seeing masses of junk coming in - targeting my network card driver filter, as I'm firewall beta testing, and it's not liking it.

Something is VERY wrong (RM14 area), 80.1.133.***

Paul

05-09-2004, 22:41

I would hardly describe proper operation of the internet as very wrong. :)

swoop101

06-09-2004, 05:46

nope, port 445 still blocked here.
Just checked via sygate and it is still closed down.

BBKing

06-09-2004, 09:10

What type of modems/SACMs do you each have?

Matth

06-09-2004, 11:55

Pace DiTV1000

None logged so far today - I reckong they must have been wortking on something, as both problems came and went quite suddenly - status line was no help, though perhaps it was last week's message I needed?

A sample, after that, I dropped the Network card filter onto TCP445, so I could pick out anything of greater importance... checking again - still clean

05/09/04 22:31:54 NETBIOS TCP 80.219.194.194 1366 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:31:05 NETBIOS TCP 80.1.188.22 3157 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:30:15 NETBIOS TCP 80.146.59.22 3525 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:30:02 NETBIOS TCP 80.26.9.123 3391 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:29:36 NETBIOS TCP 80.185.191.18 3566 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:29:30 NETBIOS TCP 80.141.236.42 1691 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:28:48 NETBIOS TCP 80.1.128.46 2482 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:28:23 NETBIOS TCP 80.38.255.72 4748 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:27:15 NETBIOS TCP 80.219.206.216 2159 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:26:33 NETBIOS TCP 80.116.250.90 2882 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:24:39 NETBIOS TCP 80.129.247.190 4873 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:24:15 NETBIOS TCP 80.131.9.133 3883 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:23:40 NETBIOS TCP 80.1.244.238 3927 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:22:22 NETBIOS TCP 80.219.95.96 2169 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:18:40 NETBIOS TCP 80.42.136.222 2465 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:18:39 NETBIOS TCP 80.1.128.46 1534 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:18:27 NETBIOS TCP 80.42.177.47 2321 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:17:57 NETBIOS TCP 80.137.240.174 4200 Block Server Message Block Protocol (TCP) MICROSOFT_DS
05/09/04 22:17:55 NETBIOS TCP 80.43.1.68 3517 Block Server Message Block Protocol (TCP) MICROSOFT_DS

Looks like this was a transient and local issue, and maybe related to my loss of DNS over the same interval.