[Samba] Persistent SPOOLSS_ADDPRINTEREX commands from Windows NT 4.0 computers

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Buozis, Martynas wrote:

| My questions would be following. What is SPOOLSS_ADDPRINTEREX ?

It's the rpc used to create a printer on a remote CIFS
server.

| Can it be some kind of worm ?

Unlikely.  But could be.  Do these Windows clients have
legitimate reason to be connecting to your server?  Perhaps
some cached niformation from past times?







cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDKyXUIR7qMdg1EfYRAq7cAJ9Z0FDRjmDocHGMgEah+w7zO7NlpgCguO6q
OebO4JnI8h0zqkjUhEEAVaU=
=LliW
-----END PGP SIGNATURE-----