From owner-freebsd-questions Sun May 17 20:03:04 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA17200 for freebsd-questions-outgoing; Sun, 17 May 1998 20:03:04 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from lucy.bedford.net (lucy.bedford.net [206.99.145.54]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA17149 for ; Sun, 17 May 1998 20:02:54 -0700 (PDT) (envelope-from listread@lucy.bedford.net) Received: (from listread@localhost) by lucy.bedford.net (8.8.8/8.8.8) id XAA06540; Sun, 17 May 1998 23:02:33 -0400 (EDT) (envelope-from listread) Message-Id: <199805180302.XAA06540@lucy.bedford.net> Subject: Re: Somewhat off-topic: Port 54 DNS Queries??? In-Reply-To: <01BD81D3.5A6198B0@w3svcs.mfn.org> from "J.A. Terranson" at "May 17, 98 08:35:36 pm" To: sysadmin@mfn.org (J.A. Terranson) Date: Sun, 17 May 1998 23:02:33 -0400 (EDT) Cc: Secure-NT@wwa.com, freebsd-questions@FreeBSD.ORG Reply-to: djv@bedford.net From: CyberPeasant X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG J.A. Terranson wrote: > We have recently been rejecting a *ton* of udp packets from port 54 > that purport to be DNS queries. Does anyone know what's going on > here? My guess is that some wanker is trying to crack you or run a DoS against your named, and got the port number off-by-one. Dave -- <----. mail-to: djv@bedford.net <----|=================================== <----' Zber Qnrzbaf, Srjre Qrivyf! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message