[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Port 53 rewrite?



I have a pretty standard RH9 install. I have installed djbdns to act as my
DNS server. I removed the default BIND DNS service, but am seeing some odd
behavior on port 53 requests. 

tcpdump host 192.168.0.118 and udp port 53
tcpdump: listening on eth0
14:49:12.796806 140.239.119.105.50192 > 192.168.0.118.domain:  137 A?
musicwithmeaning.com. (38)
14:49:12.810728 192.168.0.118.1034 > ns2.attbi.com.domain:  28608+ PTR?
118.0.168.192.in-addr.arpa. (44) (DF)
14:49:12.832937 ns2.attbi.com.domain > 192.168.0.118.1034:  28608
NXDomain* 0/1/0 (112) (DF)
14:49:12.833318 192.168.0.118.1034 > ns2.attbi.com.domain:  28609+ PTR?
105.119.239.140.in-addr.arpa. (46) (DF)
14:49:12.950397 ns2.attbi.com.domain > 192.168.0.118.1034:  28609
NXDomain* 0/1/0 (114) (DF)
14:49:12.950758 192.168.0.118.1034 > ns2.attbi.com.domain:  28610+ PTR?
68.227.148.216.in-addr.arpa. (45) (DF)
14:49:12.973969 ns2.attbi.com.domain > 192.168.0.118.1034:  28610 1/4/4
(219) (DF)
14:49:13.818623 140.239.119.105.35714 > 192.168.0.118.domain:  63094 A?
musicwithmeaning.com. (38)

The server seems to be redirecting any port 53 requests out to my ISP's
DNS servers. This is not something I set up intenetionally. I am not sure
how to troubleshoot and/or fix this problem.

Thanks,
Roger

------------------------------------------
E-mail provided by AudibleFaith.com
Music and other resources
http://www.audiblefaith.com
Music With Meaning?




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]