Re: [Dorset] [OT] DNS port number

2011-02-25 Thread Ralph Corderoy
Hi Andrew, Once a connection is made (an incoming connect request to an allowed port) accept(2) will grab another port so that the original port is free for further connect requests. For the benefit of others, since I know you really know this already :-), accept(2) creates another *socket*

Re: [Dorset] [OT] DNS port number

2011-02-25 Thread Andrew Reid Paterson
On Friday, February 25, 2011 05:25:29 pm Ralph Corderoy wrote: Hi Andrew, Once a connection is made (an incoming connect request to an allowed port) accept(2) will grab another port so that the original port is free for further connect requests. For the benefit of others, since I know

Re: [Dorset] [OT] DNS port number

2011-02-24 Thread Dan Dart
Yup, Ralph, that's how I see one abstraction of it... I get iptables panic when I use Skype. It uses lots of high UDPs for a hole punch. It eventually works though. -- Next meeting: Blandford Forum, Wednesday 2011-03-02 20:00 Meets, Mailing list, IRC, LinkedIn, ... http://dorset.lug.org.uk/ How

Re: [Dorset] [OT] DNS port number

2011-02-23 Thread jr
On 23 February 2011 23:03, Tim xendis...@gmx.com wrote: Any thoughts? I'd look into setting up a DMZ box (if you've a spare machine), separating the internal network from the Virgin/BT/whatever supplied h/ware. extreme, admittedly, but what price peace of mind? -- regards, jr. time flies

Re: [Dorset] [OT] DNS port number

2011-02-23 Thread Andrew Reid Paterson
On Wednesday, February 23, 2011 11:11:59 pm jr wrote: On 23 February 2011 23:03, Tim xendis...@gmx.com wrote: Any thoughts? I'd look into setting up a DMZ box (if you've a spare machine), separating the internal network from the Virgin/BT/whatever supplied h/ware. extreme, admittedly, but

Re: [Dorset] [OT] DNS port number

2011-02-23 Thread Tim
On Wednesday 23 February 2011 23:22:14 Andrew Reid Paterson wrote: On Wednesday, February 23, 2011 11:11:59 pm jr wrote: On 23 February 2011 23:03, Tim xendis...@gmx.com wrote: Any thoughts? I'd look into setting up a DMZ box (if you've a spare machine), separating the internal network

Re: [Dorset] [OT] DNS port number

2011-02-23 Thread Ralph Corderoy
Hi Dan, On Wednesday 23 February 2011 23:12:31 Dan Dart wrote: 8.8.8.8 is Google's DNS service. If you're using it, then that'll be why. The high port numbers are the responses. which were blocked :( I know 8.8.8.8 is google, I have had the same log entries when I was using opendns IP