port 137,139,445 blocked, still lmb?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

found some windows machines in my network that block all incoming packets
but still participate in browser elections and win?
At least "nmap -p 139,445 141.41.98.152" tells me that they are filtered. Is
this possible?

greets
Julius
 
I believe browser traffic uses port 138 UDP. To find out for sure try using
something like Wireshark [Ethereal] to see what is going on.

Steve
 
Back
Top