Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Dec 2002 14:18:51 -0600
From:      Albert Chin <freebsd-stable@thewrittenword.com>
To:        freebsd-stable@FreeBSD.ORG
Subject:   Re: DNS query from public IP though localhost specified
Message-ID:  <20021204141851.B63349@oolong.il.thewrittenword.com>
In-Reply-To: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAAO9tPW30zwEK83aYi7%2BDsmQEAAAAA@primus.ca>; from 937863@primus.ca on Wed, Dec 04, 2002 at 02:46:44PM -0500
References:  <20021204104103.F56412@oolong.il.thewrittenword.com> <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA4RatOouMvEOzXXL4aXw9/cKAAAAQAAAAO9tPW30zwEK83aYi7%2BDsmQEAAAAA@primus.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 04, 2002 at 02:46:44PM -0500, Allan Jude wrote:
> Connecting to any of your ips from your own box, will route through
> localhost (netstat -rn)

Yes. However, if I:
  $ ssh 192.168.0.1
then why should I see DNS queries from 67.89.x.y on 192.168.0.1? Maybe
I should ask the ssh people as this seems to be ssh-specific. When I
"ftp 192.168.0.1", I don't see any DNS queries on lo0 from 67.89.x.y.

> -----Original Message-----
> From: owner-freebsd-stable@FreeBSD.ORG
> [mailto:owner-freebsd-stable@FreeBSD.ORG] On Behalf Of Albert Chin
> Sent: Wednesday, December 04, 2002 11:41 AM
> To: freebsd-stable@freebsd.org
> Subject: DNS query from public IP though localhost specified
> 
> 
> I have a multihomed FreeBSD 4.6-STABLE box with two public IPs on xl0
> and one private IP on xl1. The hostname corresponds to the private IP
> on xl1. This box acts as a nameserver running BIND 9.2.1 and
> /etc/resolv.conf is configured as:
>   search [internal domain] [external domain]
>   nameserver 127.0.0.1
> 
> If I try to ssh to this host from another box and have "tcpdump -i
> lo0" running, I get tcpdump output indicating:
>   18:16:48.342762 [public hostname].1572 > [public hostname].domain:
> 19465+ PTR? [rev internal ip].in-addr.arpa. (43)
>   18:16:48.343292 [public hostname].domain > [public hostname].1572:
> 19465 Refused 0/0/0 (43)
>   18:16:48.346175 localhost.[internal domain].1573 > localhost.[internal
> domain].domain:  12661+ PTR? [rev internal ip].in-addr.arpa. (43)
>   18:16:48.346555 localhost.[internal domain].domain >
> localhost.[internal domain].1573:  12661* 1/1/1 PTR[|domain]
> 
> It seems that only ssh causes this behaviour. ftpd causes only
> localhost lookups.
> 
> So, why am I seeing queries from the public IP on xl0 while listening
> on lo0
> 
> -- 
> albert chin (china@thewrittenword.com)
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-stable" in the body of the message
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-stable" in the body of the message

-- 
albert chin (china@thewrittenword.com)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021204141851.B63349>