DNS access on private (RFC 1918) network

Charlie Schluting charlie at schluting.com
Tue Jan 20 21:41:34 PST 2004


Kenneth W Cochran wrote:

> Hello:
> 
> I get messages like the following in my syslog all the time:
> 
> Jan 20 09:00:40 <kern.info> localhost /kernel: Connection attempt to
> UDP 192.168.0.1:1990 from 192.168.0.1:53
> Jan 20 09:02:48 <kern.info> localhost /kernel: Connection attempt to
> UDP 192.168.0.1:2052 from 192.168.0.1:53

WOW! Someone else with this problem!
Its doing this because you're logging connection attempts to ports that 
aren't listening. I don't know why the attempts happens. I get hundreds 
of these a day:
Connection attempt to UDP 127.0.0.1:50675 from 127.0.0.1:53
Connection attempt to UDP 127.0.0.1:54731 from 127.0.0.1:53
Connection attempt to UDP 127.0.0.1:54730 from 127.0.0.1:53
Connection attempt to UDP 127.0.0.1:54807 from 127.0.0.1:53

Strangely enough, mine are all to -> from locahost. Possibly because 
this box has a real address?

net.inet.udp.log_in_vain: 1

Whomever solves this one is my hero for life ;)
I think its a feature.

-Charlie



More information about the freebsd-questions mailing list