Because most firewalls are improperly configured when it comes to DNS (port 53) and will let packets through that they shouldn't. ----- Original Message ----- From: "Togan Muftuoglu" <toganm@users.sourceforge.net> To: "Suse-Security" <suse-security@suse.com> Sent: Thursday, May 24, 2001 1:14 AM Subject: [suse-security] weird request from port 53 to 2049
Hi,
can someone give me any reason why a nameserver would make a request to 2049 which is nfs
Packet log: input DENY ppp0 PROTO=17 212.156.4.20:53 212.156.196.114:2049
L=137 S=0x00 I=5423 F=0x0000 T=27 (#39)
Packet log: input DENY ppp0 PROTO=17 212.156.4.20:53 212.156.196.114:2049 L=137 S=0x00 I=5574 F=0x0000 T=27 (#39) Packet log: input DENY ppp0 PROTO=17 212.156.4.20:53 212.156.196.114:2049 L=137 S=0x00 I=5738 F=0x0000 T=27 (#39)
-- Togan Muftuoglu
--------------------------------------------------------------------- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com