Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 1 Feb 2004 12:36:27 -0800 (PST)
From:      Don Lewis <truckman@FreeBSD.org>
To:        kovacspeter2@freemail.hu
Cc:        freebsd-stable@FreeBSD.org
Subject:   Re: DNS problem
Message-ID:  <200402012036.i11KaR7E098132@gw.catspoiler.org>
In-Reply-To: <freemail.20040101210826.68312@fm5.freemail.hu>

next in thread | previous in thread | raw e-mail | index | archive | help
On  1 Feb, Kovács Péter wrote:
> Hello,
> 
>> Which server in your organization is acting as a DNS
>> server?
> The Windows...
> 
>> If you only have one network card in your FreeBSD box...
> Yes, I only have one.
> 
>> This could be why you only see this kind of traffic with one IP address.
> Is there a way to fix this?

Something on your FreeBSD box is sending DNS queries to your Windows box
and is timing out its query and closing the socket it used to send the
query before the Windows box returns its response.  Because you have
net.inet.udp.log_in_vain enabled, your FreeBSD box logs the arrival of
the DNS response packet because there is not a UDP socket listening on
the port that the response is being returned to.

About all you can do to turn off these messages is to turn off
udp.log_in_vain.  As a substitute you could log unexpected packets using
one of the firewall packages on FreeBSD, which would allow you to ignore
packets coming from port 53 on your DNS server.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402012036.i11KaR7E098132>