From owner-freebsd-questions@FreeBSD.ORG Wed Jun 3 23:53:51 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BB37C6B6 for ; Wed, 3 Jun 2015 23:53:51 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: from mail-ie0-x233.google.com (mail-ie0-x233.google.com [IPv6:2607:f8b0:4001:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 89C2B1238 for ; Wed, 3 Jun 2015 23:53:51 +0000 (UTC) (envelope-from jd1008@gmail.com) Received: by iesa3 with SMTP id a3so25152125ies.2 for ; Wed, 03 Jun 2015 16:53:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=SsySxkybuu/FaDrskxILQQxyLiQ0ted2rwrR4W6PAJs=; b=plXVOg+oqtMfRxr1GUnVJimMRfuriSADV2512ALVjZlXuSFnt3NLlnCf7KibkZdco7 gxz/66PIIAt1nOSRWm3cEcY1yI8kJaoLhmLthfAERNuuqeJUNzdipYaWCC6J+oO5grLY Tmk3pr2Wo7wz+wgHqVVl1mcKnlO9fdefa7YWdK8PxgCdhx/lfDqDKaI52dTBbMbYKr9g IVnDcICc7DXQvPtyoih3R4U6gRM3R7XWpezI211pjaAXs8g3tF7RJO7uO4b0h6mcLXnT YXkVD/t2iXctQEBAHb2yUGpks8qkony2CE1Sg04zasGHxnv78MlIYBW8aUd7oy4QCulT wkug== X-Received: by 10.107.19.221 with SMTP id 90mr44465478iot.26.1433375630860; Wed, 03 Jun 2015 16:53:50 -0700 (PDT) Received: from linux-1gx3.site (c-73-3-70-211.hsd1.ut.comcast.net. [73.3.70.211]) by mx.google.com with ESMTPSA id q10sm13238218ige.16.2015.06.03.16.53.49 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 03 Jun 2015 16:53:50 -0700 (PDT) Message-ID: <556F938C.2050401@gmail.com> Date: Wed, 03 Jun 2015 17:53:48 -0600 From: jd1008 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Subject: Re: port 53 under attack References: <556F87A6.8090105@a1poweruser.com> In-Reply-To: <556F87A6.8090105@a1poweruser.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2015 23:53:51 -0000 On 06/03/2015 05:03 PM, joeb1 wrote: > Hello list > : > My firewall blocks unsolicited inbound traffic on port 53. I realize > this is the DNS port. But I am getting over 200K hits per day from ip > addresses from all over the world. My host has a dynamic ip address. > Is there any valid reason for this to be happening? > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > Hackers run robots to hack into ip addresses. Their scripts simply keep trying all possible IP addresses. Not difficult to do with programs or scripts.