Date: Wed, 4 Dec 2002 14:18:51 -0600 From: Albert Chin <freebsd-stable@thewrittenword.com> To: freebsd-stable@FreeBSD.ORG Subject: Re: DNS query from public IP though localhost specified Message-ID: <20021204141851.B63349@oolong.il.thewrittenword.com> In-Reply-To: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAAO9tPW30zwEK83aYi7%2BDsmQEAAAAA@primus.ca>; from 937863@primus.ca on Wed, Dec 04, 2002 at 02:46:44PM -0500 References: <20021204104103.F56412@oolong.il.thewrittenword.com> <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAAO9tPW30zwEK83aYi7%2BDsmQEAAAAA@primus.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 04, 2002 at 02:46:44PM -0500, Allan Jude wrote: > Connecting to any of your ips from your own box, will route through > localhost (netstat -rn) Yes. However, if I: $ ssh 192.168.0.1 then why should I see DNS queries from 67.89.x.y on 192.168.0.1? Maybe I should ask the ssh people as this seems to be ssh-specific. When I "ftp 192.168.0.1", I don't see any DNS queries on lo0 from 67.89.x.y. > -----Original Message----- > From: owner-freebsd-stable@FreeBSD.ORG > [mailto:owner-freebsd-stable@FreeBSD.ORG] On Behalf Of Albert Chin > Sent: Wednesday, December 04, 2002 11:41 AM > To: freebsd-stable@freebsd.org > Subject: DNS query from public IP though localhost specified > > > I have a multihomed FreeBSD 4.6-STABLE box with two public IPs on xl0 > and one private IP on xl1. The hostname corresponds to the private IP > on xl1. This box acts as a nameserver running BIND 9.2.1 and > /etc/resolv.conf is configured as: > search [internal domain] [external domain] > nameserver 127.0.0.1 > > If I try to ssh to this host from another box and have "tcpdump -i > lo0" running, I get tcpdump output indicating: > 18:16:48.342762 [public hostname].1572 > [public hostname].domain: > 19465+ PTR? [rev internal ip].in-addr.arpa. (43) > 18:16:48.343292 [public hostname].domain > [public hostname].1572: > 19465 Refused 0/0/0 (43) > 18:16:48.346175 localhost.[internal domain].1573 > localhost.[internal > domain].domain: 12661+ PTR? [rev internal ip].in-addr.arpa. (43) > 18:16:48.346555 localhost.[internal domain].domain > > localhost.[internal domain].1573: 12661* 1/1/1 PTR[|domain] > > It seems that only ssh causes this behaviour. ftpd causes only > localhost lookups. > > So, why am I seeing queries from the public IP on xl0 while listening > on lo0 > > -- > albert chin (china@thewrittenword.com) > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message -- albert chin (china@thewrittenword.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021204141851.B63349>