bind is tries to connect an unknown host an port 137 ?!

Cricket Liu cricket at acmebw.com
Fri May 19 15:56:58 UTC 2000


> I am running bind 8.2.2p5 on a 2.0.38 Linux-Box...
> During observing my firewall logfiles i notice the following strange
thing:
>
> May 19 08:08:13 mail kernel: Packet log: lan-in DENY eth1 PROTO=17
> 192.168.0.202:53 194.117.253.245:137 L=124 S=0x00 I=65088 F=0x0000 T=64
(#2)
>
> (192.168.0.202 is my internal DNS server; 194.117.253.245 is dynamic
> dialin ip of a german isp)
>
> I wonder why my DNS server trys connecting a host with a dynamic ip on
> one of the netbios ports ?
> Is anyone of you able to explain this behaviour to me ?

Is it a Microsoft DNS Server?  They can be configured to use a
NETBIOS adaptor status request to do reverse mapping.

cricket

Acme Byte & Wire
cricket at acmebw.com
www.acmebw.com

Attend the next Internet Software Consortium/Acme Byte & Wire
DNS and BIND class!  See www.acmebw.com/training.htm for
the schedule and to register for upcoming classes.




More information about the bind-users mailing list