From owner-freebsd-questions@FreeBSD.ORG Thu Mar 19 14:55:44 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 70AD2AE6 for ; Thu, 19 Mar 2015 14:55:44 +0000 (UTC) Received: from smtpauth.rollernet.us (smtpauth.rollernet.us [IPv6:2607:fe70:0:3::d]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 554C8C89 for ; Thu, 19 Mar 2015 14:55:44 +0000 (UTC) Received: from smtpauth.rollernet.us (localhost [127.0.0.1]) by smtpauth.rollernet.us (Postfix) with ESMTP id DCF0A5940AA; Thu, 19 Mar 2015 07:55:39 -0700 (PDT) Received: from w500-wifi.ramos.link (w500-wifi.ramos.link [IPv6:2a01:240:fe00:82e4:216:eaff:fec1:77da]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpauth.rollernet.us (Postfix) with ESMTPSA; Thu, 19 Mar 2015 07:55:39 -0700 (PDT) Message-ID: <1426776935.9502.2.camel@miguel.ramos.name> Subject: Re: public network traffic to my ip address port 53 From: Miguel Lopes Santos Ramos To: Ernie Luzar Date: Thu, 19 Mar 2015 14:55:35 +0000 In-Reply-To: <550AE2A7.3010903@gmail.com> References: <550AE2A7.3010903@gmail.com> Content-Type: text/plain; charset="ISO-8859-15" X-Mailer: Evolution 3.12.11 Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-Rollernet-Abuse: Processed by Roller Network Mail Services. Contact abuse@rollernet.us to report violations. Abuse policy: http://www.rollernet.us/policy X-Rollernet-Submit: Submit ID 5dbf.550ae36b.878d7.0 Cc: FreeBSD Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Mar 2015 14:55:44 -0000 A Qui, 19-03-2015 ās 10:52 -0400, Ernie Luzar escreveu: > In my firewall log I see thousands of udp packets from ip addresses all > over the word trying to access my freebsd gateway server on port 53. > Right now I am blocking them and see no negative effects. > Is there any valid reason to allow these unsolicited inbound packets > access to my system on port 53? UDP port 53 is for DNS name resolution. You can block them, since you don't run a name server (otherwise, you would know what port 53 is for). However, if no one is listening on port 53, there isn't much reason to block it at the firewall. -- Miguel Ramos pgp:A006A14C