Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) filter port 139

Rob Dirksen <rddirkse@pi.net> wrote:

> I've implemented on a P50 a IP call filter according to page 643
> on the ascend site.
> 
> Can anybody tell me why my box is still setting up calls every 2 minutes
> with this info.
> As far as I can see it, this is a call for port 139 which
> should be blocked by the filter.
> 
> thanks
> 
> rob.
> 
> Date: 01/01/1990.     Time: 00:08:07
> Cause an attempt to place call to 012345678
> WD_DIALOUT_DISP: chunk 25B468 type IP.
> (task: 25B610, time: 487.95) 182 octets @ 2A9200
>   [0000]: 00 C0 7B 6D C5 AB 00 C0 26 80 6F 84 08 00 45 0D
>   [0010]: 00 B6 5D 2B 40 00 7F 06 FD AA D0 CD FF 9A D0 CD
>   [0020]: FF 28 04 2D 00 8B 00 99 43 F2 38 CF 53 25 50 18
>   [0030]: 1C 8C CB FE 00 00 00 00 00 8A FF 53 4D 42 32 00
>   [0040]: 00 00 00 00 01 80 00 00 00 00 00 00 00 00 00 00
>   [0050]: 00 00 08 10 FF FF 03 10 81 AC 0F 48 00 00 00 0A
>   [0060]: 00 80 09 00 00 00 00 00 00 00 00 00 00 48 00 42
>   [0070]: 00 00 00 00 00 01 00 01 00 49 00 00 00 00 04 00
>   [0080]: 00 00 04 01 00 00 00 00 5C 00 4D 00 53 00 4D 00
>   [0090]: 41 00 49 00 4C 00 5C 00 57 00 47 00 50 00 4F 00
>   [00a0]: 30 00 30 00 30 00 30 00 5C 00 47 00 4C 00 42 00
>   [00b0]: 5C 00 46 00 4C 00



MSMAIL is calling out:


WD_DIALOUT_DISP: IP.
 (168 bytes remaining)
                  ---- IP Header ----
              45  IP Version 4, header length = 5 (20 bytes)
              0d  type of service
            00b6  total length    = 182
            5d2b  id              = 23851
            4000  fragment offset = (DF) 0
              7f  time to live    = 127
              06  protocol        = Transmission Control          
[RFC793,JBP]
            fdaa  checksum        = 64938
        d0cdff9a  source address  = 208.205.255.154.
        d0cdff28  dest address    = 208.205.255.40.
                  ---- TCP Header ----
            042d  source port     = 1069
            008b  dest port       = 139
        009943f2  sequence number
        38cf5325  ack number
              50  offset          =
              18  flags           = ACK PSH
            1c8c  window          = 7308
            cbfe  checksum        = 52222
            0000  urgent pointer  = 0
-------- 128 data bytes remaining

  [0000]: 00 00 00 8a ff 53 4d 42 32 00 00 00 00 00 01 80
.....SMB2.......
  [0010]: 00 00 00 00 00 00 00 00 00 00 00 00 08 10 ff ff
................
  [0020]: 03 10 81 ac 0f 48 00 00 00 0a 00 80 09 00 00 00
.....H..........
  [0030]: 00 00 00 00 00 00 00 48 00 42 00 00 00 00 00 01
.......H.B......
  [0040]: 00 01 00 49 00 00 00 00 04 00 00 00 04 01 00 00
...I............
  [0050]: 00 00 5c 00 4d 00 53 00 4d 00 41 00 49 00 4c 00
..\.M.S.M.A.I.L.
  [0060]: 5c 00 57 00 47 00 50 00 4f 00 30 00 30 00 30 00
\.W.G.P.O.0.0.0.
  [0070]: 30 00 5c 00 47 00 4c 00 42 00 5c 00 46 00 4c 00
0.\.G.L.B.\.F.L.


so, no reason for just another filter.

Best regards,

   Wolfgang

_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-
                         B  E  N  E  I  C  K  E
                               EDV-Beratung
________________________________________________________________________
        Netzwerk-Design - 3Com Solution Partner
           ISDN Remote Access - ASCEND Vertrieb
              DIGITAL Partner PC-Systeme und Server
                 ApplePoint
                    Windows NT-Netzwerke
                       Workstation Memories and Storage Solutions

Dr. Wolfgang Beneicke                                 fon +49-6223-48126
Fasanenstrasse 16, D-69251 Gaiberg                     fax +49-6223-5708
...near world famous Heidelberg, Germany
_-_-_-_-_s-c_h-n_i-p_p_-_-_-_-_-_-_-_-_-_--_-_-_-_-_-_-_-_z-a_c-k_-_-_-_


++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>