Date: 25 Jul 2000 01:14:28 +0200 From: Cyrille Lefevre <clefevre@citeweb.net> To: Lyndon Nerenberg <lyndon@messagingdirect.com> Cc: Gerhard Sittig <Gerhard.Sittig@gmx.net>, security@FreeBSD.ORG Subject: Re: What does this mean and how do I stop it ? Message-ID: <bsznglyj.fsf@gits.dyndns.org> In-Reply-To: Lyndon Nerenberg's message of "Mon, 24 Jul 2000 13:16:03 -0600" References: <144260000.964466163@gollum.esys.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
Lyndon Nerenberg <lyndon@messagingdirect.com> writes: > --On 07/24/00 19:29:15 +0200 Gerhard Sittig <Gerhard.Sittig@gmx.net> > wrote: > > > On Mon, Jul 24, 2000 at 08:56 +1000, Stanley Hopcroft wrote: > >> > >> These entries appear frequently in the daily security report of > >> a FreeBSD 4.0-RELEASE machine (Bind 8.2.x) > >> > >> > Connection attempt to UDP 127.0.0.1:2343 from 127.0.0.1:53 > > > > I don't care if everybody's telling you it's DNS *lookup* -- I > > feel this is something different, since it's going *from* port 53 > > *to* something random(?). > > If you have 'nameservers 127.0.0.1' in /etc/resolv.conf then this is > probably named answering a DNS lookup request from a local process. well. except by setting log_in_vain to zero. is there another way to get rid of those messages ? if not, log_in_vain is meaningless if we have to set it to zero to get rid of those messages, no ? Cyrille. -- home: mailto:clefevre@citeweb.net work: mailto:Cyrille.Lefevre@edf.fr To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bsznglyj.fsf>