From owner-freebsd-questions Thu Apr 19 7:54: 7 2001 Delivered-To: freebsd-questions@freebsd.org Received: from schmoo.tclme.org (schmoo.tclme.org [208.24.53.96]) by hub.freebsd.org (Postfix) with SMTP id 48FA337B422 for ; Thu, 19 Apr 2001 07:54:03 -0700 (PDT) (envelope-from info@top-photo.com) Received: (qmail 78684 invoked from network); 19 Apr 2001 14:49:58 -0000 Received: from unknown (HELO top-photo.com) (rgreene@208.24.52.135) by mail.tclme.org with SMTP; 19 Apr 2001 14:49:58 -0000 Message-ID: <3ADEFE24.171ED61A@top-photo.com> Date: Thu, 19 Apr 2001 10:03:00 -0500 From: Info Organization: Top Photo X-Mailer: Mozilla 4.76 [en] (X11; U; Linux 2.4.3 i686) X-Accept-Language: en MIME-Version: 1.0 To: Joe Guetler Cc: freebsd-questions@freebsd.org Subject: Re: Named strangeness References: <3ADEF801.F49B115C@axiomadvertising.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Joe Guetler wrote: > > I've been getting these messages in my security check for a while, and > I had read in the archives that they really should be no big deal, but > can someone tell me why named keeps attempting to do this? > > > Connection attempt to UDP www.xxx.yyy.zzz:3315 from www.xxx.yyy.zzz:53 > > Connection attempt to UDP www.xxx.yyy.zzz:3364 from www.xxx.yyy.zzz:53 > > Connection attempt to UDP www.xxx.yyy.zzz:3477 from www.xxx.yyy.zzz:53 > > Connection attempt to UDP www.xxx.yyy.zzz:3500 from www.xxx.yyy.zzz:53 > > Connection attempt to UDP www.xxx.yyy.zzz:3535 from www.xxx.yyy.zzz:53 > > Connection attempt to UDP www.xxx.yyy.zzz:3634 from www.xxx.yyy.zzz:53 > > I'm just curious as to the cause, because if it's problem with the way I > set up named, I would like to get it fix asap. > Please post real data. These log hacks are of little use. If there are repeated attempts from the same address, to be safe, you should probably check your version of BIND and then look at http://www.cert.org/nav/index_red.html -- Bob Greene AustinTX.COM 512.835.8005 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message