There are usually constant scans on the net for port 137 . People are looking for unpassworded windows shares all the time.


700 54600 deny log udp from any to me 137 via tun0

I have received 700 scans for port 137 in the last 24 hours from people ALL over the net.

Blocking is from outside your network is always the best policy