Don't have to worry about this as Ms machines are broadcasting. Just allow these on your network or if you don't want to allow don't log all the logs Regards, Dharmendra.T Linux Security Expert www.nsecure.net dharmu@nsecure.net On Saturday 30 November 2002 04:08, Martin Marques wrote: > I'm getting lots of firewall logs informing me that packages with these > specifications where blocked: > > scr-port 138, dest-port 138, dest IP <broadcast> > scr-port 137, dest-port 137, dest IP <broadcast> > > scr-port 1029, dest-port 137, dest IP <my firewall IP> > > Any thoughts? Is this Bug bear virus? --