Re: (ASCEND) filter port 139

[Jim Howard <jhoward@lyceum.com>]

At 15:13 1998/03/18 +0100, Rob Dirksen wrote:
>I've implemented on a P50 a IP call filter according to page 643
>on the ascend site.

>Can anybody tell me why my box is still setting up calls every 2 minutes
>with this info.
>As far as I can see it, this is a call for port 139 which
>should be blocked by the filter.

the Ascend filters on http://www.ascend.com/643.html
are setup as to block only UDP packets with
137,138,139 as the _source_ port number,
(which doesn't make much sense to me for an OUTPUT filter)
your packet below has 139 as the destination port.

the call filters that I use on my WAN port, which work quite well 
with WinNT/Win95 systems on both sides of the link are: 
        drop ICMP
        drop UDP dest 137
        drop UDP dest 138
        drop UDP dest 139
        drop TCP dest 139
        drop TCP dest 135
        forward all

-Jim H
----
Jim Howard             Sr Network Engineer        Lyceum Internet
jhoward@lyceum.com     http://www.lyceum.com/     404.248.1733     

My PGP Public Key: http://www.lyceum.com/~jhoward/pgp-key.txt
Fingerprint: 7E8B E2BA 1314 2535 CB08  CFF9 119B 7CD3 2488 954D

++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>

---

• Prev by Date: Re: (ASCEND) more phone lines than modems...
• Next by Date: Re: (ASCEND) more phone lines than modems...
• Prev by thread: Re: (ASCEND) filter port 139
• Next by thread: Re: (ASCEND) Part II-Configuring Your filter(FIXED)(PipeX)
• Index(es):
  • Main
  • Thread