bind is tries to connect an unknown host an port 137 ?!

Nikolas Hagelstein NHagelstein at helcom.de
Fri May 19 08:33:40 UTC 2000


hi,

I am running bind 8.2.2p5 on a 2.0.38 Linux-Box...
During observing my firewall logfiles i notice the following strange thing:

May 19 08:08:13 mail kernel: Packet log: lan-in DENY eth1 PROTO=17
192.168.0.202:53 194.117.253.245:137 L=124 S=0x00 I=65088 F=0x0000 T=64 (#2)

(192.168.0.202 is my internal DNS server; 194.117.253.245 is dynamic dialin
ip of a german isp)

I wonder why my DNS server trys connecting a host with a dynamic ip on one
of the netbios ports ?
Is anyone of you able to explain this behaviour to me ?
Thnx4ward,
               Nikolas



More information about the bind-users mailing list