Software·43,750 discussions

Black ICE Defender & networking

Locked

I have a client running a win98SE network of 2 stations, sharing a DSL internet connection through a network hub.
since they are running multi-user apps, the shared printer, and database files reside on one computer.
Black ICE Defender has been installed on both machines.
Why would the machine acting as a pseudo-server get tons of intruder hits, while the other computer is relatively hit-free?
The one getting all the hits gets a lot of NetBIOS hits. Is that related to networking?

Thanksfor the help,

gilles mailhiot

Topic

Black ICE Defender & networking

In reply to Black ICE Defender & networking

More than likely the hits are due to the network,Also you may want to check your network configuration the second machine may be sharing the connection with the first wich is why the first machine gets all the hits.My isp gave me a second ip addressfor an additional machine that when configured properly was seen as a standalone as far as internet traffic.This allowed my machines to have an internal network wothout having one of my machines act as a gateway.Hope this helps

Black ICE Defender & networking

In reply to Black ICE Defender & networking

The question was auto-closed by TechRepublic

Black ICE Defender & networking

In reply to Black ICE Defender & networking

You don’t say if the attacked machine is running Internet Connection Sharing so the 2nd machine can access the Internet. If that is probably the case, then the live IP address your client has is on the attacked machine, while the 2nd machine does NOT have a live IP. The 2nd machine is probably using a 192.168.0.0/24 address (a private IP address not valid on the Internet).

Anymore, you are gonna see countless NetBIOS hits (UPD port 137, TCP port 139) on the attacked machine. That is just a reality of the Internet and Windows machines. They talk NetBIOS so much it is hysterical! For example, when I connect to certain MP3 streaming stations, I get hit with NetBIOS name requests each time! Windows seems to use NetBIOS for just about everything!
Plus, there are so many free tools out there that make NetBIOS requests, and so many script kiddies using these tools, that this is just how the Internet works. It is a very loud place.
On a dialup connection, I get scan attempts like you seeevery 10 minutes!
It is a crazy world we live in nowadays!

hope this helps

Black ICE Defender & networking

In reply to Black ICE Defender & networking

The question was auto-closed by TechRepublic

Black ICE Defender & networking

In reply to Black ICE Defender & networking

This question was auto closed due to inactivity

[Author]

Replies