From owner-freebsd-questions Mon May 18 08:35:24 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA28732 for freebsd-questions-outgoing; Mon, 18 May 1998 08:35:24 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from dc1.mfn.org (dc1.mfn.org [204.238.179.1]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id IAA28720 for ; Mon, 18 May 1998 08:35:16 -0700 (PDT) (envelope-from sysadmin@mfn.org) Received: from w3svcs.mfn.org (unverified [204.238.179.11]) by mail.mfn.org (EMWAC SMTPRS 0.83) with SMTP id ; Mon, 18 May 1998 10:37:24 -0500 Received: by w3svcs.mfn.org with Microsoft Mail id <01BD8248.90CB9840@w3svcs.mfn.org>; Mon, 18 May 1998 10:34:41 -0500 Message-ID: <01BD8248.90CB9840@w3svcs.mfn.org> From: "J.A. Terranson" To: "J.A. Terranson" , "'Dima Dorfman'" Cc: "freebsd-questions@FreeBSD.ORG" Subject: RE: Somewhat off-topic: Port 54 DNS Queries??? Date: Mon, 18 May 1998 10:34:40 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I *know*, that's why I'm asking! It appears (from several replies) that these packets *might* be from misconfigured Novell systems (who use XNS as the basis for their own auth schemes)... ---------- From: Dima Dorfman Dunno, but DNS uses UDP/53, not 54. 54 is registered to "XNS Authentication?" > We have recently been rejecting a *ton* of udp packets from port 54 > that purport to be DNS queries. Does anyone know what's going on > here? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message