Firewall issue with samba, receiving packages with SPT=137

yapp · 08-09-2005, 03:11 PM

I have some firewall issues with my SuSe system. I cannot list the available samba shares. Connecting to the share directly works, and people can connect to my shares.

The firewall logs reveal that I receive packages from (not to!) udp port 137. Is this normal, and can someone explain why these are blocked?

Code:

SFW2-INext-DROP-DEFLT IN=eth0 OUT= MAC=00:30:84:73:71:ee:00:02:a5:18:4e:9b:08:00
SRC=10.0.0.151 DST=10.0.0.100
LEN=90 TOS=0x00 PREC=0x00 TTL=128 ID=1831
PROTO=UDP SPT=137 DPT=1121 LEN=70

Thanks in advice.

yapp · 08-09-2005, 03:12 PM

additional note: people can also connect to my shares. so samba tcp/udp ports are open, but I also receive packages from udp port 137