Networking Forums

Networking Forums > Computer Networking > Linux Networking > DNS transmits --state NEW?

Reply
Thread Tools Display Modes

DNS transmits --state NEW?

 
 
Greg Russell
Guest
Posts: n/a

 
      03-12-2008, 10:00 PM
I am logging unsolicited packets from "outside" our LAN via iptables:

....
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i ! eth0 -m state --state NEW -j LOG --log-level 7
--log-prefix UNSOLICITED:

When I parse the log file, I am occasionally finding --state NEW UDP
packets from 148.78.149.20[0123] SPT=53. The first 2 of those addresses
are the nameservers of record, and:

$ cat /etc/resolv.conf
nameserver 148.78.249.200
nameserver 148.78.249.201

My question is: Why would a nameserver send me a --state NEW packet,
especially originating from port 53 where DNS requests are listened for,
and why might those other 2 addresses be involved?

I'm sorry I can't figure out how to add a Followup-To: header using this
Evolution newsreader.


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
(socket) send transmits data on same packet alexia.bee@gmail.com Linux Networking 2 05-29-2008 07:02 PM
--state NEW for UDP? Greg Russell Linux Networking 17 05-02-2008 09:34 PM
state of WLAN John Mitre Wireless Internet 0 08-24-2007 03:37 AM
how get state of socket in c tomek Linux Networking 1 12-01-2004 06:17 PM
FW NAT and Keep State Geoff Lane Linux Networking 4 12-07-2003 06:35 PM



1 2 3 4 5 6 7 8 9 10 11