AW: bind is tries to connect an unknown host an port 137 ?!
Nikolas Hagelstein
NHagelstein at helcom.de
Fri May 19 13:13:17 UTC 2000
> Looks like a DNS reply. I'd suspect someone connected a laptop PC to
> your LAN that had previously been connected to the Internet by dialin
> and is still using the source address it had gotten from the ISP.
> You'll have to use a packet sniffer to make sure.
The dialin ip didn't belong to the same network (194.x.x.x) <->
(192.168.0.0) so
the laptop IMHO would never reach the dns (no route to host). In addition a
DNS reply
to port 137 seems strange to me....
bye,
Nikolas
More information about the bind-users
mailing list