Unknown udp connections with D flag

jgtheodor · ‎09-06-2007

Hi,

I have noticed since this morning in my PIX 515E a lot of unknown udp connections with D flag (750 - 800 connections). These connections are from my ISA global IP Address to three global IP Addresses 198.32.64.12, 192.12.94.30 & 134.146.80.20. All of these connections have source port 3188. does anyone know any relevant issue?

URGENT

Thanks in advance

a.alekseev · ‎09-07-2007

198.32.64.12, 192.12.94.30 & 134.146.80.20 - DNS servers.

jgtheodor · ‎09-07-2007

Hi,

The number of the relevant connections get raised continuously. This is the first time since 3 years that i have too many connections like these to DNS Servers. In addition i have configured the ISA's network properties with another DNS IP Addresses. And of course i believe that it is not uncommon all of these connections start with the same source udp port. And something more: why the replies of these dns connections have source port other from udp 53?

Is there any way to control these connections from PIX?

Thanks in advance...