From owner-freebsd-questions Thu Jun 20 23:50:53 2002 Delivered-To: freebsd-questions@freebsd.org Received: from matrix.zssm.zp.ua (matrix.zssm.zp.ua [212.8.32.10]) by hub.freebsd.org (Postfix) with ESMTP id 5AB3F37B416 for ; Thu, 20 Jun 2002 23:50:34 -0700 (PDT) Received: from server.hermes-comp.zp.ua (germes-comp.zssm.zp.ua [212.8.32.132] (may be forged)) by matrix.zssm.zp.ua (8.11.3/8.11.3) with ESMTP id g5L6lto58473; Fri, 21 Jun 2002 09:48:01 +0300 (EEST) (envelope-from stalker@hermes-comp.zp.ua) Received: from localhost (localhost [127.0.0.1]) by server.hermes-comp.zp.ua (Postfix) with ESMTP id 327A338302; Fri, 21 Jun 2002 09:52:32 +0300 (EEST) Date: Fri, 21 Jun 2002 09:52:32 +0300 (EEST) From: Alexander V Zubchenko To: John Newlin Cc: Subject: Re: Entry in /var/log/security In-Reply-To: <000e01c218a7$97b016a0$0b01a8c0@hq.tensilica.com> Message-ID: <20020621094443.S21649-100000@server.hermes-comp.zp.ua> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Greetings! On Thu, 20 Jun 2002, John Newlin wrote: > I'm seeing a few of these in my security log: > > Jun 19 20:45:48 john /kernel: ipfw: 1300 Deny UDP 198.144.206.1:56238 255.255.255.255:53 in via de1 > > Any idea what this may be about. The source address is that of my default route. > > -John Newlin > > This mean that Your default router sending boradcast DNS queries which is not permitted by Your firewall setup on this machine. If default route is other end of Internet-link (ISP-side), You can ask them about this. If You have access to this machine, check correctness of DNS-servers-setup. Looks like it is machine, which don't know about proper nameservers to ask. Alexander V Zubchenko, E-Mail: stalker@hermes-comp.zp.ua System Administrator, WWW: http://www.hermes-comp.zp.ua/ Hermes-comp, Ukraine, Zaporizhzhya, Geroev Stalingrada 50 phone/fax: +380 612 64-19-72 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message