Unknown udp connections with D flag

Unanswered Question
Sep 6th, 2007

Hi,

I have noticed since this morning in my PIX 515E a lot of unknown udp connections with D flag (750 - 800 connections). These connections are from my ISA global IP Address to three global IP Addresses 198.32.64.12, 192.12.94.30 & 134.146.80.20. All of these connections have source port 3188. does anyone know any relevant issue?

URGENT

Thanks in advance

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jgtheodor Fri, 09/07/2007 - 00:37

Hi,

The number of the relevant connections get raised continuously. This is the first time since 3 years that i have too many connections like these to DNS Servers. In addition i have configured the ISA's network properties with another DNS IP Addresses. And of course i believe that it is not uncommon all of these connections start with the same source udp port. And something more: why the replies of these dns connections have source port other from udp 53?

Is there any way to control these connections from PIX?

Thanks in advance...

Actions

This Discussion