From owner-freebsd-questions@FreeBSD.ORG Fri Dec 3 06:12:13 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 975FA16A4CE for ; Fri, 3 Dec 2004 06:12:13 +0000 (GMT) Received: from tyven.la3sg.net (la3sg.net [217.13.29.172]) by mx1.FreeBSD.org (Postfix) with ESMTP id 394F043D66 for ; Fri, 3 Dec 2004 06:12:12 +0000 (GMT) (envelope-from tyven@tyven.la3sg.net) Received: from tyven.la3sg.net (tyven@localhost.la3sg.net [127.0.0.1]) by tyven.la3sg.net (8.13.1/8.13.1) with ESMTP id iB36C9hY001512 for ; Fri, 3 Dec 2004 07:12:09 +0100 (CET) (envelope-from tyven@tyven.la3sg.net) Received: (from tyven@localhost) by tyven.la3sg.net (8.13.1/8.13.1/Submit) id iB36C8RU001507 for freebsd-questions@freebsd.org; Fri, 3 Dec 2004 07:12:08 +0100 (CET) (envelope-from tyven) Date: Fri, 3 Dec 2004 07:12:07 +0100 From: Kjell Midtseter To: freebsd-questions@freebsd.org Message-ID: <20041203061207.GB1323@tyven.la3sg.net> Mail-Followup-To: freebsd-questions@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Subject: daily security run output messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: junkmail@sensewave.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Dec 2004 06:12:13 -0000 List members! My daily security run output contains lots of kernel log messages like the following: > Connection attempt to UDP 10.0.0.10:1099 from 217.13.4.21:53 > Connection attempt to UDP 10.0.0.10:3204 from 193.75.75.193:53 ------ What are the significanse of these messages? My ipf firewall contains: # domain name servers (dns) pass in quick on rl0 proto udp from 217.13.4.21/32 to any port = 53 keep state ------ Should I make any changes to my firewall settings? Regards from Kjell