Date: Wed, 4 Dec 2002 10:41:03 -0600 From: Albert Chin <freebsd-stable@thewrittenword.com> To: freebsd-stable@freebsd.org Subject: DNS query from public IP though localhost specified Message-ID: <20021204104103.F56412@oolong.il.thewrittenword.com>
next in thread | raw e-mail | index | archive | help
I have a multihomed FreeBSD 4.6-STABLE box with two public IPs on xl0 and one private IP on xl1. The hostname corresponds to the private IP on xl1. This box acts as a nameserver running BIND 9.2.1 and /etc/resolv.conf is configured as: search [internal domain] [external domain] nameserver 127.0.0.1 If I try to ssh to this host from another box and have "tcpdump -i lo0" running, I get tcpdump output indicating: 18:16:48.342762 [public hostname].1572 > [public hostname].domain: 19465+ PTR? [rev internal ip].in-addr.arpa. (43) 18:16:48.343292 [public hostname].domain > [public hostname].1572: 19465 Refused 0/0/0 (43) 18:16:48.346175 localhost.[internal domain].1573 > localhost.[internal domain].domain: 12661+ PTR? [rev internal ip].in-addr.arpa. (43) 18:16:48.346555 localhost.[internal domain].domain > localhost.[internal domain].1573: 12661* 1/1/1 PTR[|domain] It seems that only ssh causes this behaviour. ftpd causes only localhost lookups. So, why am I seeing queries from the public IP on xl0 while listening on lo0 -- albert chin (china@thewrittenword.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021204104103.F56412>