Skip site navigation (1)Skip section navigation (2)
Date:      05 Dec 2004 11:33:23 -0500
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        junkmail@sensewave.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: daily security run output messages
Message-ID:  <44r7m49030.fsf@be-well.ilk.org>
In-Reply-To: <20041203061207.GB1323@tyven.la3sg.net>
References:  <20041203061207.GB1323@tyven.la3sg.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Kjell Midtseter <junkmail@sensewave.com> writes:

> List members!
> 
> My daily security run output contains lots of kernel log messages like the following:
> > Connection attempt to UDP 10.0.0.10:1099 from 217.13.4.21:53
> > Connection attempt to UDP 10.0.0.10:3204 from 193.75.75.193:53
> ------
> What are the significanse of these messages?
> 
> My ipf firewall contains:
> # domain name servers (dns)
> pass in quick on rl0 proto udp from 217.13.4.21/32 to any port = 53 keep state
> ------
> Should I make any changes to my firewall settings?

Looks like a NAT problem; is your 10.0.0.10 address supposed to be
visible to the ISP's DNS server?

-- 
Lowell Gilbert, embedded/networking software engineer, Boston area
		http://be-well.ilk.org/~lowell/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44r7m49030.fsf>