RE: DNS 53 <-> 53 ?

["Jens Hassler" <j.hassler () gmx net>]

Hi John,

> As for why an ISP's DNS server is doing forward lookups off
> your firewall?
> Beats me.  The address was not used for a DNS server in the
> past was it?

No, it wasn't. This IP block is completely new ordered from our ISP.

I have to check this.

> My $A0.02 (which is equivalent to about $US0.01 :)

Thx a lot for your info.

Do you also know what the hardware address 0:0:0:0:0:1 means which was used
for these requests? I think this is some kind of multicast and this one IP
is not the sole destination...


Bye,
Jens



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users