From owner-freebsd-security@FreeBSD.ORG Thu Nov 13 10:23:10 2003 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5C16A16A4CE for ; Thu, 13 Nov 2003 10:23:10 -0800 (PST) Received: from relay.pair.com (relay.pair.com [209.68.1.20]) by mx1.FreeBSD.org (Postfix) with SMTP id 5AB7543FA3 for ; Thu, 13 Nov 2003 10:23:09 -0800 (PST) (envelope-from silby@silby.com) Received: (qmail 79111 invoked from network); 13 Nov 2003 18:23:08 -0000 Received: from niwun.pair.com (HELO localhost) (209.68.2.70) by relay.pair.com with SMTP; 13 Nov 2003 18:23:08 -0000 X-pair-Authenticated: 209.68.2.70 Date: Thu, 13 Nov 2003 12:23:07 -0600 (CST) From: Mike Silbersack To: "Dmitry S. Makovey" In-Reply-To: <200311131112.18246.dmitry@athabascau.ca> Message-ID: <20031113122147.L558@odysseus.silby.com> References: <200311131112.18246.dmitry@athabascau.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-security@freebsd.org Subject: Re: What could be on udp:48152 X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Nov 2003 18:23:10 -0000 On Thu, 13 Nov 2003, Dmitry S. Makovey wrote: > dimon@gateway ~ > sockstat | grep 49152 > bind named 270 4 udp4 *:49152 *:* > > Now', is there any reason for bind to use this port? > Googling for that subject didn't bring any results other than usualy this port > is first available for dynamic ports. Which doesn't make sence to me. > > System: > FreeBSD 5.1 > > - -- > Dmitry Makovey Bind uses a dynamically bound port for outbound DNS queries. 5.1 uses a different range of ports (49152-65535) for dynamic ports than 4.x did (1024-5000). If you search for bind and port 1024, you'll find hundreds of people asking the same question. :) Mike "Silby" Silbersack