Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 18 May 1998 13:29:40 -0400 (EDT)
From:      CyberPeasant <djv@bedford.net>
To:        sysadmin@mfn.org (J.A. Terranson)
Cc:        sysadmin@mfn.org, dima@zwb.net, freebsd-questions@FreeBSD.ORG
Subject:   Re: Somewhat off-topic: Port 54 DNS Queries???
Message-ID:  <199805181729.NAA09934@lucy.bedford.net>
In-Reply-To: <01BD8248.90CB9840@w3svcs.mfn.org> from "J.A. Terranson" at "May 18, 98 10:34:40 am"

next in thread | previous in thread | raw e-mail | index | archive | help
J.A. Terranson wrote:
> 
> I *know*, that's why I'm asking!  It appears (from several replies)
> that these packets *might* be from misconfigured Novell systems (who
> use XNS as the basis for their own auth schemes)...
> 
> ----------
> From: 	Dima Dorfman
> Dunno, but DNS uses UDP/53, not 54.  54 is registered to "XNS
> Authentication?"
> 
> > We have recently been rejecting a *ton* of udp packets from port
> 54
> > that purport to be DNS queries.  Does anyone know what's going on
> > here?

Can you track down the host that's sending them? Maybe with
netstat, or for sure with tcpdump.

Dave

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199805181729.NAA09934>