Re: UDP connection attempts

I get similar messages to these:

> Jul 19 03:25:56 ns1 kernel: Connection attempt to UDP myexternaladdress:52299 from myexternaladdress:53
> Jul 19 09:33:11 ns1 kernel: Connection attempt to UDP myexternaladdress:52316 from myexternaladdress:53

occasionally when a DNS server takes a long time to respond because
a UDP "keep state" *has* to time out eventually, and if the configured
interval is less than the DNS server response time the returning DNS
response will not match any "kept" entry. Tuning the interval will
reduce the messages, and allow the response packets through, but it
will still happen *sometimes*.

-- 
	David Pick

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"