First of all I checked the forums on the board here and I thought this seemed like the place to put my question, however I apologize if it isn't. Also I am new to firewalls and don't know much about IP address and nothing about ports and stuff like that so for all I know this problem could be perfectly normal.
Anyway, when I first installed the Comodo firewall it popped up saying that System is trying to receive a connection from the internet. And under “Security Considerations” it said “System is a safe application. However, you are about to receive a connection from another computer. If you are not sure about what to do, you should block this request.” Connection from another computer?
I blocked it, not knowing if that was normal or not. Anyway, now in the Comodo logs I find that System has been blocked from running a bunch of times, like 80 times per hour, which seems like a lot to me. It also says that the "destination port" is 137 and 138, so I decided to google this and found something about "NetBIOS." Some of the things I read on this make it sound like it is a virus or something while other things I read make it sound normal, so now I am just confused. I know that Comodo is blocking it but I'd just like to know anyway if this is something bad or if it is normal, or if I should unblock it or what.
Here is part of the log:
Application Action Source IP Source Port Destination IP Destination Port Protocol
4/2/2009 10:40:03 AM System Blocked 192.168.1.1 2048 192.168.1.4 137 UDP
4/2/2009 10:40:30 AM System Blocked 192.168.1.1 2048 192.168.1.4 137 UDP
4/2/2009 10:40:59 AM System Blocked 192.168.1.1 2048 192.168.1.4 137 UDP
4/2/2009 10:41:30 AM System Blocked 192.168.1.1 2048 192.168.1.4 137 UDP
4/2/2009 10:41:43 AM System Blocked 192.168.1.3 138 192.168.1.4 138 UDP
4/2/2009 10:41:47 AM System Blocked 192.168.1.3 138 192.168.1.4 138 UDP
4/2/2009 10:41:52 AM System Blocked 192.168.1.3 138 192.168.1.4 138 UDP
That is pretty much the gist of it. It's just System from Souce IP 192.168.1.1 and Souce port 2048 trying to get to Destination IP 192.168.1.4 Destination port 137 and System from Souce IP 192.168.1.3 and Souce port 138 trying to get to Destination IP 192.168.1.4 Destination port 138, over and over. I have scanned my computer with AVG, Super Anti-Spyware and Malwarebytes Anti-Malware and nothing came up.
So is this something bad or is this normal? Should it be unblocked or should I keep blocking it?