Hi,

On a my qmailtoaster server i've several established connections to 192.175.48.6 and 192.175.48.42

[..]
udp 0 0 ipmyserver:61910 192.175.48.6:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:14429 192.175.48.42:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:2404 192.175.48.6:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:44772 192.175.48.6:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:19943 192.175.48.42:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:13289 192.175.48.6:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:63723 192.175.48.6:53 ESTABLISHED 5679/dnscache udp 0 0 ipmyserver:35307 192.175.48.6:53 ESTABLISHED 5679/dnscache
[..]

These connection remain ESTABLISHED until i restart the services... shortly thereafter reappear.

Is it normal they stay in ESTABLISHED STATE? Why qmailtoaster has needs to contact these root servers? Is it a dns/spam attack?

Thank you

--
Michele


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to