Re: UDP connection attempts


I get similar messages to these:

Jul 19 03:25:56 ns1 kernel: Connection attempt to UDP myexternaladdress:52299 from myexternaladdress:53
Jul 19 09:33:11 ns1 kernel: Connection attempt to UDP myexternaladdress:52316 from myexternaladdress:53

occasionally when a DNS server takes a long time to respond because
a UDP "keep state" *has* to time out eventually, and if the configured
interval is less than the DNS server response time the returning DNS
response will not match any "kept" entry. Tuning the interval will
reduce the messages, and allow the response packets through, but it
will still happen *sometimes*.

--
David Pick

_______________________________________________
freebsd-security@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: SBS2003 - Cannot restore GPO following Article 888943
    ... Thanks for your response. ... PASS - All the DNS entries for DC are registered on DNS server ... Computer Policy Refresh has completed. ... The Group Policy snap-in starts, ...
    (microsoft.public.windows.server.sbs)
  • [Fwd: Re: [SLE] Suse 9.0, resolv.con, and multiple name servers]
    ... The issue then, from your response below, is that the first DNS server ... Then they came for the Communists and I did not speak out because I was not a Communist. ... Then they came for the trade unionists and I did not speak out because I was not a trade unionist. ...
    (SuSE)
  • RE: starnge dns problem
    ... If you receive the correct response when you use the ... with the host name or NetBIOS name, there is a name resolution problem. ... 814591 How To Install and Configure DNS Server in Windows Server 2003 ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Spooky DNS problem
    ... > Herb, ... > the malicious response would come from the DNS server for EvilHackers.com? ... Is what I am describing referred to as "DNS>>> cache poisoning"? ...
    (microsoft.public.win2000.dns)
  • Re: W2k DNS limitationload
    ... responsibility of the resolver to determine the kind of response it ... added sometime after W2k release in order to harden the DNS server ... >> William Stacey, MVP ...
    (microsoft.public.windows.server.dns)