Port 53 w/ IPTABLES Firewall

[Mike McCandless]

I am using RH 7.2, w/ IPTABLES 1.2.4.  About twice a day, I see traffic destined for port 53, using UDP, always length 53 from some of the following addresses:   65.203.232.2, 203.197.173.129, 202.54.111.72, 209.240.77.130   I see these because they don't match any firewall rules and get logged.  Are these port scans or legitimate traffic?     -------------------------------------------------------- Mike McCandless [EMAIL PROTECTED]