Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Netbios broadcast storm from wan ip

    Scheduled Pinned Locked Moved
    Firewalling
    2
    2
    158
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      g.ca13
      last edited by

      Hi
      Looking at the logs of my pfsense I noticed that my wan address that my ISP gives me tries to access the wan address of the pfsense with port 137 every couple of minutes but I don't understand what it depends on. The pfsense is connected to my isp's router and receives an address from the ISP-router's dmz. Does anyone have an idea?

      2023-12-08 18_06_50-pfSense.localdomain - Status_ System Logs_ Firewall_ Normal View.jpg

      M 1 Reply Last reply Reply Quote 0
      • M
        michmoor LAYER 8 Rebel Alliance @g.ca13
        last edited by

        @g-ca13
        ISP uses Microsoft server. To hand out DHCP addresses but unfortunately windows protocol messages are being sent on the same segment.
        Just a guess. Either way it’s being blocked which is a good thing

        Firewall: NetGate,Palo Alto-VM,Juniper SRX
        Routing: Juniper, Arista, Cisco
        Switching: Juniper, Arista, Cisco
        Wireless: Unifi, Aruba IAP
        JNCIP,CCNP Enterprise

        1 Reply Last reply Reply Quote 1
        • First post
          Last post