Date: Mon, 24 Jul 2000 13:16:03 -0600 From: Lyndon Nerenberg <lyndon@messagingdirect.com> To: Gerhard Sittig <Gerhard.Sittig@gmx.net>, security@FreeBSD.ORG Subject: Re: What does this mean and how do I stop it ? Message-ID: <144260000.964466163@gollum.esys.ca> In-Reply-To: <20000724192915.Z24476@speedy.gsinet>
next in thread | previous in thread | raw e-mail | index | archive | help
--On 07/24/00 19:29:15 +0200 Gerhard Sittig <Gerhard.Sittig@gmx.net> wrote: > On Mon, Jul 24, 2000 at 08:56 +1000, Stanley Hopcroft wrote: >> >> These entries appear frequently in the daily security report of >> a FreeBSD 4.0-RELEASE machine (Bind 8.2.x) >> >> > Connection attempt to UDP 127.0.0.1:2343 from 127.0.0.1:53 > > I don't care if everybody's telling you it's DNS *lookup* -- I > feel this is something different, since it's going *from* port 53 > *to* something random(?). If you have 'nameservers 127.0.0.1' in /etc/resolv.conf then this is probably named answering a DNS lookup request from a local process. --lyndon To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?144260000.964466163>