From owner-freebsd-questions Mon May 18 13:11:57 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA20166 for freebsd-questions-outgoing; Mon, 18 May 1998 13:11:57 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from dc1.mfn.org (dc1.mfn.org [204.238.179.1]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id NAA19801 for ; Mon, 18 May 1998 13:10:15 -0700 (PDT) (envelope-from sysadmin@mfn.org) Received: from w3svcs.mfn.org (unverified [204.238.179.11]) by mail.mfn.org (EMWAC SMTPRS 0.83) with SMTP id ; Mon, 18 May 1998 15:12:21 -0500 Received: by w3svcs.mfn.org with Microsoft Mail id <01BD826E.EDBF90D0@w3svcs.mfn.org>; Mon, 18 May 1998 15:09:18 -0500 Message-ID: <01BD826E.EDBF90D0@w3svcs.mfn.org> From: "J.A. Terranson" To: "J.A. Terranson" , "'djv@bedford.net'" Cc: "sysadmin@mfn.org" , "dima@zwb.net" , "freebsd-questions@FreeBSD.ORG" Subject: RE: Somewhat off-topic: Port 54 DNS Queries??? Date: Mon, 18 May 1998 15:09:16 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG J.A. Terranson wrote: > > I *know*, that's why I'm asking! It appears (from several replies) > that these packets *might* be from misconfigured Novell systems (who > use XNS as the basis for their own auth schemes)... > > ---------- > From: Dima Dorfman > Dunno, but DNS uses UDP/53, not 54. 54 is registered to "XNS > Authentication?" > > > We have recently been rejecting a *ton* of udp packets from port > 54 > > that purport to be DNS queries. Does anyone know what's going on > > here? Can you track down the host that's sending them? Maybe with netstat, or for sure with tcpdump. Problem is that it's *not* just one host, it's several: I have written the admins at all sites I tracked, however, none have replied, which is why I brought this discussion here... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message