From owner-freebsd-stable Wed Dec 4 8:41:15 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A33D737B401 for ; Wed, 4 Dec 2002 08:41:14 -0800 (PST) Received: from mail1.thewrittenword.com (ns1.thewrittenword.com [67.89.104.183]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2A7A543EB2 for ; Wed, 4 Dec 2002 08:41:11 -0800 (PST) (envelope-from freebsd-stable@thewrittenword.com) Received: (from china@localhost) by mail1.thewrittenword.com (8.11.4/8.11.4) id gB4Gf3C59141 for freebsd-stable@freebsd.org; Wed, 4 Dec 2002 10:41:03 -0600 (CST) (envelope-from freebsd-stable@thewrittenword.com) Date: Wed, 4 Dec 2002 10:41:03 -0600 From: Albert Chin To: freebsd-stable@freebsd.org Subject: DNS query from public IP though localhost specified Message-ID: <20021204104103.F56412@oolong.il.thewrittenword.com> Reply-To: freebsd-stable@freebsd.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I have a multihomed FreeBSD 4.6-STABLE box with two public IPs on xl0 and one private IP on xl1. The hostname corresponds to the private IP on xl1. This box acts as a nameserver running BIND 9.2.1 and /etc/resolv.conf is configured as: search [internal domain] [external domain] nameserver 127.0.0.1 If I try to ssh to this host from another box and have "tcpdump -i lo0" running, I get tcpdump output indicating: 18:16:48.342762 [public hostname].1572 > [public hostname].domain: 19465+ PTR? [rev internal ip].in-addr.arpa. (43) 18:16:48.343292 [public hostname].domain > [public hostname].1572: 19465 Refused 0/0/0 (43) 18:16:48.346175 localhost.[internal domain].1573 > localhost.[internal domain].domain: 12661+ PTR? [rev internal ip].in-addr.arpa. (43) 18:16:48.346555 localhost.[internal domain].domain > localhost.[internal domain].1573: 12661* 1/1/1 PTR[|domain] It seems that only ssh causes this behaviour. ftpd causes only localhost lookups. So, why am I seeing queries from the public IP on xl0 while listening on lo0 -- albert chin (china@thewrittenword.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message