Exchange packets through Netbios Port UDP 137

 Issue:

We Spotted that, exchange server is trying to connect to MS Teams IP addresses on UDP 137
the IPS are 52.123.134.179  -  52.123.135.179 


Resolution : 

first of All these IPS related to Microsoft Teams as per the link here
Microsoft 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

we can say that it is not a normal behavior from Microsoft, but at least the environment is not compromised.
 

and to stop the unwanted connection we deactivated NetBIOS. 



Comments

Post a Comment

Popular posts from this blog

After March24 SU Search issue in Outlook (cached mode)

  Issue: After installing the Security Update, some of the customers have issue with Search in Outlook (cached mode). Error message: "We're having trouble fetching results from the server..." when performing Outlook search.  Reason:  Issue with the SU. Solution : There is no direct solution but there is a workaround: 1) Use OWA or Outlook online mode if possible. 2) Disable server assisted search by creating following registry key: Path: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Search • Value name: DisableServerAssistedSearch • Value type: REG_DWORD • Value: 1
Read more

Exchange setup error: the attribute () points to an invalid DN or a deleted object

 Issue: we closed the last exchange server on Prem, and run a script to delete the AD remnant, when we try to download Exchange Mangement tools we get the following error: The well-known object entry B:32:A1C2016C84D003458132789127B84:CN=Exchange Servers\0ADEL:b2360aad-5e45-40ae-a52a-22397689104a,CN=Deleted Objects,DC=contoso,DC=lab on the otherWellKnownObjects attribute in the container object CN=Configuration,DC=contoso,DC=lab  points to an invalid DN or a deleted object.  Remove the entry, and then rerun the task. Cause: After deletion of ADSI remnants of exchange server, some attribute transferred to deleted object container but is still added to  otherWellKnownObjects  attribute. Solution: 1 . Log on a Domain Controller with Domain Admin permissions 2 . Run ldp.exe -- the LDAP GUI pops up 3 . Click on the Connection menu item and choose the "Connect" item . Leave everything as it is. DO NOT ENTER THE SERVER. Click OK The right side panel populates with dom...
Read more

Outlook on prem prompts for O365 Password

  Issue: In an Exchange on prem environment Outlook prompts for O365 Password trying to connect to exchange online or Office365. and is not connecting after that. Cause: Moder authentication was enabled Solution: First, we thought of postponing the O365 request, by adding registry Dword (ExcludeExplicitO365Endpoint) this will tell Outlook to postpone the O365 Autodiscover request to the last. 1- Open Registry Editor 2- Navigate to: HKEY_CURRENT_USER\Software\Microsoft\Office\<x.0>\Outlook\AutoDiscover 3- 3- 3- Create new Dword : ExcludeExplicitO365Endpoint  value 1  but this didn't solve the issue  so we decided to disable Modern authentication 1- Open Registry Editor 2- Navigate to: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\<x.0>\Common\Identity   3- Create Dword: EnableADAL value 0 DisableAADWAM  value 1 DisableADALatopWAMOverride  value 1 then the Prompt stopped and outlook connected to On-prem Autodiscover 
Read more