ip 69.59.189.68:53

Kerry Thompson kerry at security.geek.nz
Mon Aug 11 22:55:02 UTC 2008


W S said:
> Folks,
> I just installed BIND 9.5.0-P2 on CentOS and I see this ip address witin
> 'netstat -aunt' output:
> tcp <MY_IP>:<SOME_HIGH_PORT>    69.59.189.68:53  SYN_SENT
>
> Why my DNS box trying to contact this IP 69.59.189.68:53 ???

Thats a DNS server for an RBL service, used to block spam Email. Your mail
system is trying to connect to it with TCP and it probably has a firewall
in front of it blocking TCP access.

$ host -t any dob.sibl.support-intelligence.net
dob.sibl.support-intelligence.net name server a.support-intelligence.net.
dob.sibl.support-intelligence.net name server b.support-intelligence.net.

$ host a.support-intelligence.net
a.support-intelligence.net has address 69.59.189.68

$ host b.support-intelligence.net
b.support-intelligence.net has address 69.59.189.68







More information about the bind-users mailing list