[ILUG] [FAQ] Anti-Virus for LINUX/UNIX

[Thomas Oconnor]

anit  tripwire good  ?

> -----Original Message-----
> From:	Breathnach, Proinnsias (Dublin) [SMTP:breatpro at exchange.ie.ml.com]
> Sent:	20 March 2001 12:37
> To:	'Wynne, Conor'
> Cc:	'ILUG'
> Subject:	RE: [ILUG] [FAQ] Anti-Virus for LINUX/UNIX
> 
> Use ipchains or some such to block those ports ... there's no reason they
> should be open to the world anyway ... see does that make them go away ...
> remember they can trigger your diald configuration to dial out !
> 
> P
> 
> > -----Original Message-----
> > Subject:	RE: [ILUG] [FAQ] Anti-Virus for LINUX/UNIX
> > 
> > Thanks Prionnsias, 
> > 
> > Aha, so is it some windows user out there port scanning then? Or is it
> > just
> > harmless and can be ignored? I think this as the ip address is also
> > specified and its not one of mine. How can I check this? I'm a security
> > newbie so thats why I'm asking. 
> > 
> > Regards
> > CW
> > 
> > -------------------------
> > Simple answer ...
> > Ports 137 and 138 are the ports windows uses for NetBIOS calls, things
> > like
> > machine name resolution (as distinct from dns) ... 
> > 
> > Usually checks every 15 or so mins for new machines and re-announces
> self
> > at
> > the same time ... makes the network neighbourhood go !
> > 
> > Proinnsias
> > 
> 
> 
> -- 
> Irish Linux Users' Group: ilug at linux.ie
> http://www.linux.ie/mailman/listinfo/ilug for (un)subscription
> information.
> List maintainer: listmaster at linux.ie