DNS access on private (RFC 1918) network
ggop at madras.dyndns.org
Tue Jan 20 21:55:57 PST 2004
On Tue, Jan 20, 2004 at 09:41:39PM -0800, Charlie Schluting wrote:
> Kenneth W Cochran wrote:
> >I get messages like the following in my syslog all the time:
> >Jan 20 09:00:40 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:1990 from 192.168.0.1:53
> >Jan 20 09:02:48 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:2052 from 192.168.0.1:53
> WOW! Someone else with this problem!
> Its doing this because you're logging connection attempts to ports that
> aren't listening. I don't know why the attempts happens. I get hundreds
> of these a day:
> Connection attempt to UDP 127.0.0.1:50675 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54731 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54730 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54807 from 127.0.0.1:53
> Strangely enough, mine are all to -> from locahost. Possibly because
> this box has a real address?
udp:53 is DNS. Maybe your apps are looking a named on your machine...
Just my newbie guess.
More information about the freebsd-questions