RE: [FW1] Broadcast Garbage

[Dan Hitchcock <DHitchcock@FW1-NOSPAMbreakwatersecurity.com>]

Title: RE: [FW1] Broadcast Garbage

I bet you're running NT/2000 on Compaq servers, right?  TCP2301 is the Compaq Insight Manager port.  If this is running on your firewall, stop and disable the service (immediately :).  If it is coming from internal servers, it can safely be ignored.

HTH

Dan Hitchcock
CCNA, CCSE, MCSE
Security Analyst
Breakwater Security Associates

dhitchcock (at) breakwatersecurity (dot) com
http://www.breakwatersecurity.com

The information contained in this email message may be privileged, confidential and protected from disclosure. If you are not the intended recipient, any dissemination, distribution or copying is strictly prohibited.

-----Original Message-----
From: Alee Stevenson [mailto:Alee.Stevenson@sphinxcst.co.uk]
Sent: Wednesday, June 06, 2001 3:01 AM
To: Laurence Mayer; 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: RE: [FW1] Broadcast Garbage

NT is obviously broadcasting for something - have you removed all the normal
Microsoft Networking services from the box - ie Computer Browser Service,
Workstation, Server, NetBIOS Interface, RPC etc.

Use Lance Spitzners Guide to do this:

http://www.enteract.com/~lspitz/nt.html

Alee

-----Original Message-----
From: Laurence Mayer [mailto:lmayer@jgventures.com]
Sent: 05 June 2001 10:25
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Broadcast Garbage

Hi,

Can someone tell me if the following log item is normal.
Garbage (2301), Destination 255.255.255.255, reject, rule 0, origin Firewall

I get this "broadcast" every 1.5 min on all the interfaces of the firewall.

NT 4.0
SP 5
FW-1 4.1

Any information will help.

Thanks
Laurence       

============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================