I have a Samba server running on FreeBSD on my network.
From my Windows 7 machine, when I try to access shares on the Samba server, Norton Antivirus 2010 blocks the communication and calls it a "SMB Server Transaction Name BO" attack. It doesn't happen every time, however. I'd say it happens about 33% of the time.
This is clearly a false positive.
I had a chat with support, the answer I received from them is that I can turn off Norton's detection of this particular exploit, but I cannot exclude a particular host. That's a pretty poor design decision, in my opinion.
Are there any plans to fix this problem, or is there some config I can change on my Samba server to stop this from happening?