TCP DNS requests

From: Carl R Diliberto (cdiliberto@hotmail.com)
Date: 10/30/02 

From: "Carl R Diliberto" <cdiliberto@hotmail.com>
To: "security-basics" <security-basics@securityfocus.com>
Date: Wed, 30 Oct 2002 08:46:23 -0500

We are reporting TCP based DNS requests to one of our DNS servers coming
from internal, client IP addresses. My manager would like to block the TCP
packets. What or why would their be random TCP packets? We monitored
several clients and it appears it only needs UDP.

Thanks
Carl

Relevant Pages

  • RE: TCP DNS requests
    ... One program I know of that uses TCP requests for DNS requests is Microsoft's ... SMTP server that's bundled with IIS. ... Might want to check your suspect client to see if they have an SMTP server ...
    (Security-Basics)
  • RE: TCP DNS requests
    ... Using an employee number for an employee is our only option. ... ~Zone Transfers use TCP instead of UDP on port 53. ... ~> We are reporting TCP based DNS requests to one of our DNS servers ... What or why would their be random TCP packets? ...
    (Security-Basics)
  • RE: TCP DNS requests
    ... Zone transfer uses TCP/53, while queries use UDP/53. ... Zone Transfers use TCP instead of UDP on port 53. ... > We are reporting TCP based DNS requests to one of our DNS servers ... What or why would their be random TCP packets? ...
    (Security-Basics)
  • RE: TCP DNS requests
    ... even queries beyond a certain size will go on TCP. ... Subject: TCP DNS requests ... > from internal, client IP addresses. ... What or why would their be random TCP packets? ...
    (Security-Basics)
  • Re: Problem with writing fast UDP server
    ... it likely means you have reached your ethernet bandwidth ... frames) to achieve your desired results. ... Keep in mind TCP is stream based, not datagram based so you may need ... On your client, make the following changes. ...
    (comp.lang.python)