[ previous ] [ next ] [ threads ]
 
 From:  "David W." <dw dot dw dot dw at gmail dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Continuously DNS Requests
 Date:  Thu, 17 Nov 2005 18:28:30 +0100
Hi Adam,
thanks a lot for your help! I put a wrong NTP Server in the options.
Now it's working fine again.

Best regards,
David

Adam Gibson wrote:
> Forgot to add that the requests m0n0wall were sending were for the NTP
> server which was a hostname.  The desktop system behind the firewall
> were shut down so I know it was generated from the firewall.
>
> Adam Gibson wrote:
> > I noticed the same thing(only looked at 1.2) if you put in DNS servers
> > that refuse your requests(for instance if you switch ISPs but forget to
> > change the DNS entries).  If the DNS server refuses the request(sends
> > refused responses) m0n0wall will constantly keep sending DNS
> > queries(multiple times a second non-stop).  This was another scenario
> > that would not have been noticed without a packet sniffer.  I had to put
> > another system on the wire to see why m0n0wall was generating all the
> > traffic(I noticed the activity lights always going).   Yea... I want a
> > packet sniffer with m0n0wall :).
> >
> > dw dot dw dot dw at gmail dot com wrote:
> >
> >> Hi Folks,
> >>
> >> m0n0wall (v1.2 generic-pc) is continuously sending some packets to my
> >> ISP's DNS Server. I'm using PPPoE on WAN. The DNS Servers are served
> >> by my ISP on dialup.
> >> Since m0n0wall is sending packets every second, it makes me about 17MB
> >> traffic per day, resulting in 500MB per month.
> >>
> >> Packets are always sent to the DNS Server while WAN is up. No matter
> >> whether LAN interface is connected or not.
> >> DNS Forwarder & DHCP Server is on.
> >>
> >> Screenshot from Firewall States Table:
> >> http://home.arcor.de/tempdir/m0n0wall_dns.png
> >>
> >> If you need some further information just let me know.
> >>
> >> Best Regards,
> >> David