bind is tries to connect an unknown host an port 137 ?!
Cricket Liu
cricket at acmebw.com
Fri May 19 15:56:58 UTC 2000
> I am running bind 8.2.2p5 on a 2.0.38 Linux-Box...
> During observing my firewall logfiles i notice the following strange
thing:
>
> May 19 08:08:13 mail kernel: Packet log: lan-in DENY eth1 PROTO=17
> 192.168.0.202:53 194.117.253.245:137 L=124 S=0x00 I=65088 F=0x0000 T=64
(#2)
>
> (192.168.0.202 is my internal DNS server; 194.117.253.245 is dynamic
> dialin ip of a german isp)
>
> I wonder why my DNS server trys connecting a host with a dynamic ip on
> one of the netbios ports ?
> Is anyone of you able to explain this behaviour to me ?
Is it a Microsoft DNS Server? They can be configured to use a
NETBIOS adaptor status request to do reverse mapping.
cricket
Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com
Attend the next Internet Software Consortium/Acme Byte & Wire
DNS and BIND class! See www.acmebw.com/training.htm for
the schedule and to register for upcoming classes.
More information about the bind-users
mailing list