RE: [FW1] Broadcast Garbage

[Dan Hitchcock <DHitchcock@breakwatersecurity.com>]

    [ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1")  79 lines. ]
    [ Unable to print this part. ]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]


I bet you're running NT/2000 on Compaq servers, right?  TCP2301 is the
Compaq Insight Manager port.  If this is running on your firewall, stop
and disable the service (immediately :).  If it is coming from internal
servers, it can safely be ignored.

HTH

Dan Hitchcock
CCNA, CCSE, MCSE
Security Analyst
Breakwater Security Associates
206.770.0700 x147
dhitchcock (at) breakwatersecurity (dot) com
http://www.breakwatersecurity.com

The information contained in this email message may be privileged,
confidential and protected from disclosure. If you are not the intended
recipient, any dissemination, distribution or copying is strictly
prohibited.


-----Original Message-----
From: Alee Stevenson [mailto:Alee.Stevenson@sphinxcst.co.uk]
Sent: Wednesday, June 06, 2001 3:01 AM
To: Laurence Mayer; 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: RE: [FW1] Broadcast Garbage



NT is obviously broadcasting for something - have you removed all the
normal
Microsoft Networking services from the box - ie Computer Browser Service,
Workstation, Server, NetBIOS Interface, RPC etc.

Use Lance Spitzners Guide to do this:

http://www.enteract.com/~lspitz/nt.html

Alee

-----Original Message-----
From: Laurence Mayer [mailto:lmayer@jgventures.com]
Sent: 05 June 2001 10:25
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Broadcast Garbage




Hi,

Can someone tell me if the following log item is normal.
Garbage (2301), Destination 255.255.255.255, reject, rule 0, origin
Firewall

I get this "broadcast" every 1.5 min on all the interfaces of the
firewall.

NT 4.0
SP 5
FW-1 4.1

Any information will help.

Thanks
Laurence       


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


===============================================================================

     To unsubscribe from this mailing list, please see the instructions
at
               http://www.checkpoint.com/services/mailing.html
===============================================================================