From owner-freebsd-questions  Thu Oct 22 03:57:55 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id DAA19248
          for freebsd-questions-outgoing; Thu, 22 Oct 1998 03:57:55 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from ns.cityip.co.za (ns.cityip.co.za [196.25.223.140])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id DAA19237
          for <questions@freebsd.org>; Thu, 22 Oct 1998 03:57:52 -0700 (PDT)
          (envelope-from wjv@cityip.co.za)
Received: from wjv by ns.cityip.co.za with local (Exim 1.82 #2)
	id 0zWHob-0003qB-00; Thu, 22 Oct 1998 12:17:57 +0200
Message-ID: <19981022121757.A14735@cityip.co.za>
Date: Thu, 22 Oct 1998 12:17:57 +0200
From: Johann Visagie <wjv@cityip.co.za>
To: dron@croc.ru, questions@FreeBSD.ORG
Subject: Re: question
Mail-Followup-To: dron@croc.ru, questions@FreeBSD.ORG
References: <916A7822BE8CD111943800805F8B29EC217785@ns.croc.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 0.91.1i
In-Reply-To: <916A7822BE8CD111943800805F8B29EC217785@ns.croc.ru>; from dron@croc.ru on Thu, Oct 22, 1998 at 11:20:21AM +0300
X-PGP: ftp://ftp.cityip.co.za/users/wjv/pubkey.asc
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

On Thu, 22 Oct 1998 at 11:20 SAT, dron@croc.ru wrote:
> 
> In "FreeBSD Security How-To" I read and do:
>  
> sysctl -w net.inet.tcp.log_in_vain=1
> sysctl -w net.inet.udp.log_in_vain=1
>  
> And now I regulary receive in logs:
>  
> Oct 21 13:10:20 proxy /kernel: Connection attempt to UDP 194.190.88.1:1171
> from 194.190.88.1:53
> Oct 21 13:10:20 proxy /kernel: Connection attempt to UDP 194.190.88.1:1172
> from 194.190.88.10:53
> Oct 21 13:10:24 proxy /kernel: Connection attempt to UDP 194.190.88.1:1173
> from 194.190.88.1:53
> Oct 21 13:11:37 proxy /kernel: Connection attempt to UDP 194.190.88.1:1179
> from 194.190.88.10:53
>  
>  194.190.88.1 - is my FreeBSD, secondary DNS
>  194.190.88.10 - is my Primary DNS
>  
>  What does it means ?
>  Can anybody advise anything ?

I would say it means that your named isn't currently running on your
secondary nameserver.  Or at least, for some reason it's not accepting
connections on 53/udp as it should.

-- V

Johann Visagie | wjv@CityIP.co.za | Tel: +27 21 419-7878 | ICQ: 20645559

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message