Re: Advice pls on what is happening on my system

In article <9727CA28ED1AC51D7E@66.250.146.159>, Alix <alix@alix.com>
wrote:

> On Fri 09 Dec 2005 18:59:28, Jerry Gardner <jg2@gardnerclan.net>
> wrote:
>
> > On Fri, 09 Dec 2005 10:14:50 GMT, Alix wrote:
> >> 38.113.2.100 :53
> >> Jerky Network Services, Mass
> >>
> >> 199.166.26.100 :53
> >> VRx Network Services Inc. server=JFWHOME.FUNHOUSE.COM
> >> 199.166.29.100 :53
> >> VRx Network Services Inc. server=JFWHOME.FUNHOUSE.COM
> >> 199.166.31.100 :53
> >> VRx Network Services Inc. server=JFWHOME.FUNHOUSE.COM
> >
> > What do these log entries mean? That your firewall dropped
> > packets from these addresses/ports? For the sake of this post,
> > I'll assume they do. If this is the case, then you need to
> > configure your firewall to allow your machine to pass outbound
> > traffic to UDP port 53 on any external IP address and to admit
> > the replies from the same IP:port combinations.
> >
> > DNS uses UDP port 53 (and sometimes TCP port 53) in its normal
> > operation. Blocking this port will cause problems.
>
> BUT why is the DNS server being asked to resolve IP addresses which
> have names that I have never heard of and whose services/products I
> have never taken no want to?

Jerky Network Services and VRx Network Services sound like ISPs or
hosting services. They're probably hosting the DNS of sites that you
were accessing. There's no reason you would recognize these hosting
services, any more than you would expect to know the name of the
trucking company that delivers meat to your grocery.

-- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***