are these BIND errors....

[Gary Kline]

On Thu, Jun 28, 2001 at 01:27:51PM -0400, James A Griffin wrote:
> Gary Kline wrote:
> > 
> >         Can any BIND wizard shed some light on the following?  Seems that
> >         these began when I moved from BIND-8 to BIND-9.  Not certain.
> >         What am I doing wrong in my config!
> > 
> >         gary kline
> > 
> > Jun 27 22:18:15 tao /kernel: Connection attempt to UDP 216.39.168.248:53 from 216.136.204.119:53
> > Jun 27 22:18:15 tao /kernel: Connection attempt to UDP 127.0.0.1:512 from 127.0.0.1:1123
> > Jun 27 22:21:09 tao /kernel: Connection attempt to UDP 216.39.168.248:53 from 207.224.243.50:53
> > Jun 27 22:21:09 tao /kernel: Connection attempt to UDP 216.39.168.248:53 from 207.224.243.50:53
> > 
> 
> No, it is some form of packet filter (firewall) or intrusion detection
> system (IDS) telling you about events.  Port 53 is named and port
> 512/udp is biff.
> 

	Strange thing is that I have no packet filtering going on
	(( at least none that I  have installed so far!)).

	What IDS could be reporting thses kind of Connection attempts?

	gary



-- 
   Gary D. Kline    kline at thought.org  www.thought.org    Public service Unix