I'm running sygate freebie home FW, and since I wondered what ntoskrnl.exe needs to be calling out for all the time I set to block it. On the applications list is shows BLOCK. Yet the program continues to get incoming calls on port 138, and send returns on that port. And it is doing all this to IP xxx.xxx.xxx.255 (my IP, but with 255 instead of me). None of my g00gling around about ntoskrnl.exe explains why it should do this, what that address is about, and why should sygate be allowing this? Helpless newbs need to know.
While we're at it, I keep getting port scans to a variety of ports, and sometimes these come in bunches of three or four. Often I'll be playing an online game and it will crash, and when I see the desktop the red incoming arrow is lit up, and the log invariably shows several such scans blocked. Are these scans knocking me off my game connection?