Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 21 Jan 2004 16:54:14 +1100
From:      Gautam Gopalakrishnan <ggop@madras.dyndns.org>
To:        Charlie Schluting <charlie@schluting.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: DNS access on private (RFC 1918) network
Message-ID:  <20040121055414.GA8771@madras.dyndns.org>
In-Reply-To: <400E1113.5020806@schluting.com>
References:  <200401201537.KAA16833502@shell.TheWorld.com> <400E1113.5020806@schluting.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jan 20, 2004 at 09:41:39PM -0800, Charlie Schluting wrote:
> Kenneth W Cochran wrote:
> 
> >Hello:
> >
> >I get messages like the following in my syslog all the time:
> >
> >Jan 20 09:00:40 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:1990 from 192.168.0.1:53
> >Jan 20 09:02:48 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:2052 from 192.168.0.1:53
> 
> WOW! Someone else with this problem!
> Its doing this because you're logging connection attempts to ports that 
> aren't listening. I don't know why the attempts happens. I get hundreds 
> of these a day:
> Connection attempt to UDP 127.0.0.1:50675 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54731 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54730 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54807 from 127.0.0.1:53
> 
> Strangely enough, mine are all to -> from locahost. Possibly because 
> this box has a real address?

udp:53 is DNS. Maybe your apps are looking a named on your machine...
Just my newbie guess.

Gautam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040121055414.GA8771>