Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Apr 2001 10:03:00 -0500
From:      Info <info@top-photo.com>
To:        Joe Guetler <joe@axiomadvertising.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Named strangeness
Message-ID:  <3ADEFE24.171ED61A@top-photo.com>
References:  <3ADEF801.F49B115C@axiomadvertising.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Joe Guetler wrote:
> 
>         I've been getting these messages in my security check for a while, and
> I had read in the archives that they really should be no big deal, but
> can someone tell me why named keeps attempting to do this?
> 
>         > Connection attempt to UDP www.xxx.yyy.zzz:3315 from www.xxx.yyy.zzz:53
>         > Connection attempt to UDP www.xxx.yyy.zzz:3364 from www.xxx.yyy.zzz:53
>         > Connection attempt to UDP www.xxx.yyy.zzz:3477 from www.xxx.yyy.zzz:53
>         > Connection attempt to UDP www.xxx.yyy.zzz:3500 from www.xxx.yyy.zzz:53
>         > Connection attempt to UDP www.xxx.yyy.zzz:3535 from www.xxx.yyy.zzz:53
>         > Connection attempt to UDP www.xxx.yyy.zzz:3634 from www.xxx.yyy.zzz:53
> 
> I'm just curious as to the cause, because if it's problem with the way I
> set up named, I would like to get it fix asap.
> 

Please post real data.  These log hacks are of little use.

If there are repeated attempts from the same address, to be safe, you
should probably check your version of BIND and then look at
http://www.cert.org/nav/index_red.html

-- 
Bob Greene
AustinTX.COM
512.835.8005

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3ADEFE24.171ED61A>