Date: Mon, 18 May 1998 15:09:16 -0500 From: "J.A. Terranson" <sysadmin@mfn.org> To: "J.A. Terranson" <sysadmin@mfn.org>, "'djv@bedford.net'" <djv@bedford.net> Cc: "sysadmin@mfn.org" <sysadmin@mfn.org>, "dima@zwb.net" <dima@zwb.net>, "freebsd-questions@FreeBSD.ORG" <freebsd-questions@FreeBSD.ORG> Subject: RE: Somewhat off-topic: Port 54 DNS Queries??? Message-ID: <01BD826E.EDBF90D0@w3svcs.mfn.org>
next in thread | raw e-mail | index | archive | help
J.A. Terranson wrote: > > I *know*, that's why I'm asking! It appears (from several replies) > that these packets *might* be from misconfigured Novell systems (who > use XNS as the basis for their own auth schemes)... > > ---------- > From: Dima Dorfman > Dunno, but DNS uses UDP/53, not 54. 54 is registered to "XNS > Authentication?" > > > We have recently been rejecting a *ton* of udp packets from port > 54 > > that purport to be DNS queries. Does anyone know what's going on > > here? Can you track down the host that's sending them? Maybe with netstat, or for sure with tcpdump. Problem is that it's *not* just one host, it's several: I have written the admins at all sites I tracked, however, none have replied, which is why I brought this discussion here... To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01BD826E.EDBF90D0>