[Dshield] DNS Question
wyrdrune at yoshiwara.org.uk
Thu Sep 25 16:31:26 GMT 2003
Quoting Bjorn Stromberg <bjorn at thechemistrylab.com>:
> Does anyone know why I'd be getting UDP Packets from my ISP's DNS
> from port 53 to port 1031?
> It doesn't happen regularly, but in my logs I see it going back for
> months. Am I missing something? It happens so sporadically that I'd have
> hard time catching the packets without grabbing a ton of other junk.
What happens is that Windows issues (IIRC) 3 requests, and closes the port
as soon as one of them comes back. The others are rejected and hit the
That's my understanding, however I'm willign to be corrected.
More information about the list