IWETHEY v. 0.3.0 | TODO
1,095 registered users | 0 active users | 0 LpH | Statistics
Login | Create New User
IWETHEY Banner

Welcome to IWETHEY!

IWETHEY Home / IWETHEY Board / Security Forum / Haven't seen that one.
Post #116,302
by static
9/2/03 4:02:12 AM
Reply
New Haven't seen that one.
Some DNS servers respond to port 53, but they're not supposed to do that to DNS queries. That would be the only thing I could think of.

Wade.

Is it enough to love
Is it enough to breathe
Somebody rip my heart out
And leave me here to bleed
 
Is it enough to die
Somebody save my life
I'd rather be Anything but Ordinary
Please

-- "Anything but Ordinary" by Avril Lavigne.
Post #116,304
by rickmoen
Picture of rickmoen
9/2/03 4:20:30 AM
Reply
New Eh?
Wade wrote:

Some DNS servers respond to port 53, but they're not supposed to do that to DNS queries.

I would bloody well hope they all do.

\nuncle-enzo:/tmp# lsof -i TCP:53\nCOMMAND   PID USER   FD   TYPE DEVICE SIZE NODE NAME\nnamed   31711 root   10u  IPv4 427044       TCP localhost:domain (LISTEN)\nnamed   31711 root   12u  IPv4 427046       TCP linuxmafia.com:domain (LISTEN)\nnamed   31712 root   10u  IPv4 427044       TCP localhost:domain (LISTEN)\nnamed   31712 root   12u  IPv4 427046       TCP linuxmafia.com:domain (LISTEN)\nnamed   31713 root   10u  IPv4 427044       TCP localhost:domain (LISTEN)\nnamed   31713 root   12u  IPv4 427046       TCP linuxmafia.com:domain (LISTEN)\n\nnamed   31714 root   10u  IPv4 427044       TCP localhost:domain (LISTEN)\nnamed   31714 root   12u  IPv4 427046       TCP linuxmafia.com:domain (LISTEN)\nnamed   31715 root   10u  IPv4 427044       TCP localhost:domain (LISTEN)\nnamed   31715 root   12u  IPv4 427046       TCP linuxmafia.com:domain (LISTEN)\nuncle-enzo:/tmp#\n


Rick Moen
rick@linuxmafia.com

If you lived here, you'd be $HOME already.
Post #116,305
by static
9/2/03 4:29:51 AM
Reply
New Sorry, I mis-typed.
I meant some DNS servers make a response back to port 53, rather than back to the port the connection came in on. English vagaries aside, I'm probably mis-remembering something the O'Reilly book. :-)

Wade.

Is it enough to love
Is it enough to breathe
Somebody rip my heart out
And leave me here to bleed
 
Is it enough to die
Somebody save my life
I'd rather be Anything but Ordinary
Please

-- "Anything but Ordinary" by Avril Lavigne.
Post #116,306
by static
9/2/03 4:29:52 AM
Reply
New Sorry, I mis-typed.
I meant some DNS servers make a response back to port 53, rather than back to the port the connection came in on. English vagaries aside, I'm probably mis-remembering something the O'Reilly book. :-)

Wade.

Is it enough to love
Is it enough to breathe
Somebody rip my heart out
And leave me here to bleed
 
Is it enough to die
Somebody save my life
I'd rather be Anything but Ordinary
Please

-- "Anything but Ordinary" by Avril Lavigne.
     Recently started experimenting with router rules - (dmarker) - (9) - Aug. 31, 2003, 08:01:56 PM EDT
         In general... - (Yendor) - (1) - Aug. 31, 2003, 08:05:39 PM EDT
             what he said, open what you need ending with a deny all -NT - (boxley) - Sept. 1, 2003, 12:21:37 AM EDT
         Re: Recently started experimenting with router rules - (rickmoen) - Sept. 1, 2003, 03:46:10 AM EDT
         You could probably block everything. - (static) - (5) - Sept. 1, 2003, 09:50:58 AM EDT
             Re: You could probably block everything. - (dmarker) - (4) - Sept. 1, 2003, 09:21:08 PM EDT
                 Haven't seen that one. - (static) - (3) - Sept. 2, 2003, 04:02:12 AM EDT
                     Eh? - (rickmoen) - (2) - Sept. 2, 2003, 04:20:30 AM EDT
                         Sorry, I mis-typed. - (static) - Sept. 2, 2003, 04:29:51 AM EDT
                         Sorry, I mis-typed. - (static) - Sept. 2, 2003, 04:29:52 AM EDT

An eye is upon you!
90 ms