DNS access on private (RFC 1918) network

[Gautam Gopalakrishnan]

On Tue, Jan 20, 2004 at 09:41:39PM -0800, Charlie Schluting wrote:
> Kenneth W Cochran wrote:
> 
> >Hello:
> >
> >I get messages like the following in my syslog all the time:
> >
> >Jan 20 09:00:40 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:1990 from 192.168.0.1:53
> >Jan 20 09:02:48 <kern.info> localhost /kernel: Connection attempt to
> >UDP 192.168.0.1:2052 from 192.168.0.1:53
> 
> WOW! Someone else with this problem!
> Its doing this because you're logging connection attempts to ports that 
> aren't listening. I don't know why the attempts happens. I get hundreds 
> of these a day:
> Connection attempt to UDP 127.0.0.1:50675 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54731 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54730 from 127.0.0.1:53
> Connection attempt to UDP 127.0.0.1:54807 from 127.0.0.1:53
> 
> Strangely enough, mine are all to -> from locahost. Possibly because 
> this box has a real address?

udp:53 is DNS. Maybe your apps are looking a named on your machine...
Just my newbie guess.

Gautam