|
Posted by Sebastian Gottschalk on July 30, 2006, 11:37 pm
If you were Registered and logged in, you could reply and use other advanced thread options
pbrannen wrote:
> If that's the case, should I allow port 137 originating from inside
> my network to help with logging?
You should not allow any NetBIOS traffic to transit the perimeter.
Allowing it won't help with logging either, rather install a sniffer and
check your server's configuration.
> Searching the web for the port ranges for the blocked ActiveX control
> has turned up no info. Could that be from surfing the web from our
> server as well?
Definitely.
> I should mention that a reverse NS lookup on the
> remote IPs doesn't turn up any domains that looks familiar (beyond
> regular ISP domains (comcast, etc).
OK, that's rather strange.
In the meanwhile I'm asking what an ActiveX filter rule should even look
like, as there's no significant difference between invoking an ActiveX
control and invoking any general plugin, including the browser's
internal viewers.
| 
XML site map