<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">On 19. 09. 24 03:01, Roger Marquis
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:98qor0pn-972o-o17q-25nq-p1n32rrs1s38@mx.roble.com">Is
there any way to disable these (random?) UDP listening ports
<br>
(47998|32542|14380|34448|45248|22313|26237|61057) or any downside
<br>
to filtering them?
<br>
<br>
Roger
<br>
<br>
# lsof | grep -w vscan | grep UDP
<br>
COMMAND PID USER FD TYPE DEVICE
SIZE/OFF NODE NAME
<br>
perl 79714 vscan 10u IPv4 0xfffff80164e96b40 0 UDP
$amavis.ip:59511->$nameserver.ip:53
<br>
perl 79714 vscan 12u IPv4 0xfffff802071cb880 0 UDP
*:47998->*:*
<br>
perl 79715 vscan 10u IPv4 0xfffff8010be3c340 0 UDP
$amavis.ip:43712->$nameserver.ip:53
<br>
perl 79715 vscan 11u IPv4 0xfffff80151d19dc0 0 UDP
*:32542->*:*
<br>
perl 79716 vscan 10u IPv4 0xfffff8005a7cb300 0 UDP
$amavis.ip:49013->$nameserver.ip:53
<br>
perl 79716 vscan 12u IPv4 0xfffff800215cfac0 0 UDP
*:14380->*:*
<br>
perl 79717 vscan 10u IPv4 0xfffff8005a7cb140 0 UDP
*:34448->*:*
<br>
perl 79717 vscan 11u IPv4 0xfffff80336cb4f20 0 UDP
$amavis.ip:21362->$nameserver.ip:53
<br>
perl 79718 vscan 10u IPv4 0xfffff8008a018c60 0 UDP
*:45248->*:*
<br>
perl 79718 vscan 11u IPv4 0xfffff800702ece40 0 UDP
$amavis.ip:43194->$nameserver.ip:53
<br>
perl 79719 vscan 10u IPv4 0xfffff8010be3cdc0 0 UDP
*:22313->*:*
<br>
perl 79719 vscan 11u IPv4 0xfffff800da7546a0 0 UDP
$amavis.ip:12460->$nameserver.ip:53
<br>
perl 79720 vscan 10u IPv4 0xfffff800702ec220 0 UDP
*:26237->*:*
<br>
perl 79720 vscan 11u IPv4 0xfffff800661973c0 0 UDP
$amavis.ip:21489->$nameserver.ip:53
<br>
perl 79721 vscan 10u IPv4 0xfffff802d3897920 0 UDP
*:61057->*:*
<br>
perl 79721 vscan 11u IPv4 0xfffff80066197800 0 UDP
$amavis.ip:43299->$nameserver.ip:53
<br>
<br>
</blockquote>
<p>These look like DNS lookups going from <b>$amavis.ip:[random_port]</b>
to <b>$nameserver.ip:53</b>.<br>
<br>
</p>
<p>I guess filtering them could have some downsides.</p>
<p><br>
</p>
<p> D.</p>
<p><br>
</p>
</body>
</html>