[Snort-users] my logs is flooding with snort w/ some weird message about port 53

alexus ml at ...1718...
Tue Sep 4 13:46:03 EDT 2001


i dont want to remove that rule i want to leave it as is

i want to configure bind to use unprivilage port

i'm using BIND 9.2.0rc1

thanks in advance

----- Original Message -----
From: "Ramin Alidousti" <ramin at ...2444...>
To: "alexus" <ml at ...1718...>
Cc: "Ramin Alidousti" <ramin at ...2444...>;
<snort-users at lists.sourceforge.net>
Sent: Tuesday, September 04, 2001 4:22 PM
Subject: Re: [Snort-users] my logs is flooding with snort w/ some weird
message about port 53


> What version of bind are you using?
>
> You have two options:
>
> 1) Force named to use an unprivileged port (bind 8.1 and
>    above use an unprivileged port by default and the previous
>    versions use port 53).
>
> 2) You can remove that alert rule.
>
> Ramin
>
>
> On Tue, Sep 04, 2001 at 04:13:00PM -0400, alexus wrote:
>
> > hm okay i did that
> >
> > same thing...
> >
> > coment out doesn't make sense.. you gotta specify to use port >1023
>





More information about the Snort-users mailing list