Re: TCP domain connection

2000-06-04 Thread Ralf G. R. Bergs
On Sat, 3 Jun 2000 23:30:46 +0200 (CEST), Igor Mozetic wrote: >As far as I understand, these are not DNS queries since they >are UDP. If nameserver queries exceed the max UDP data length they are submitted using TCP. -- Sign the EU petition against SPAM: L I N U X .~. http://ww

Re: TCP domain connection

2000-06-03 Thread Steve Zinck
It's probably nothing to worry about. But if they're zone transfers, you can prevent that (BIND 8.x syntax ...) with allow-transfer in your named.conf. ie: zone "domain.com" { allow-transfer { 123.456.7.8; }; }; Also, if you're worried about BIND security, you might want to look into

Re: TCP domain connection

2000-06-03 Thread Peter Palfrader
Hi Igor! On Sun, 04 Jun 2000, Igor Mozetic wrote: > > Peter Palfrader writes: > > > > As far as I understand, these are not DNS queries since they > > > are UDP. > > > > DNS queries usually are UDP actually. > > Well, this is my point. DNS queries are UDP and are not logged > by ippl. But

Re: TCP domain connection

2000-06-03 Thread Peter Palfrader
Hi Igor! On Sat, 03 Jun 2000, Igor Mozetic wrote: > As far as I understand, these are not DNS queries since they > are UDP. DNS queries usually are UDP actually. yours, peter -- http://www.cosy.sbg.ac.at/~ppalfrad

Re: TCP domain connection

2000-06-03 Thread Jens Müller
- Original Message - From: "Igor Mozetic" <[EMAIL PROTECTED]> To: Sent: Saturday, June 03, 2000 11:30 PM Subject: TCP domain connection > > I'm observing TCP connections to port 53 (domain) to our > (secondary) name server from unknown locations. > ippl.log looks like: > > Jun 3 21: