From owner-freebsd-questions@FreeBSD.ORG Wed Apr 23 15:17:43 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 297E837B401 for ; Wed, 23 Apr 2003 15:17:43 -0700 (PDT) Received: from rammstein.mweb.co.za (rammstein.mweb.co.za [196.2.53.175]) by mx1.FreeBSD.org (Postfix) with ESMTP id BF22743FA3 for ; Wed, 23 Apr 2003 15:17:38 -0700 (PDT) (envelope-from dj_boris@mail.ru) Received: from kny-dial-196-7-205-180.mweb.co.za ([196.7.205.180] helo=d) by rammstein.mweb.co.za with smtp (Exim 3.33 #1) id 198SIP-0006Lj-00 for freebsd-questions@FreeBSD.ORG; Thu, 24 Apr 2003 00:00:53 +0200 Message-ID: <012501c309e6$23c2e890$6300a8c0@d> From: "DJ Boris" To: "freebsd-questions" Date: Thu, 24 Apr 2003 00:17:32 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Subject: some service is causing DNS query and therefore dial out X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Apr 2003 22:17:43 -0000 hi there, I am having a problem tracking down "something" that triggers a dial out on my FreeBSD 4.7-RELEASE FreeBSD 4.7-RELEASE #0: Wed Oct 9 15:08:34 GMT 2002 root@builder.freebsdmall.com:/usr/obj/usr/src/sys/GENERIC i386 It is somethign trying to do a DNS query Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72) Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (44/72) Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67) Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78) Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (39/67) Apr 24 00:01:42 fbsd ppp[45]: tun0: TCP/IP: OUT UDP: xxx.xxx.xxx.xxx:1040 ---> xxx.xxx.xxx.xxx:53 (50/78) I have sendmail but I have removed the "-q" flag so I only call that from ppp.linkup file. how can I track down what this service is? can anyone give me any ideas? this server is alone on the LAN at the moment? I have a DNS server running but I have heartbeat-interval set to 0. I have spent hours looking through the logs and tracking the times but I don't seem to be able to identify what is causing this. can someone help me out here? what conf files do I need to give you? thanx a lot DJ Boris