Is this a security incident?

[unixjingleman]

Hi
I recently did:

#netstat -f inet -an

On my OpenBSD machine. The output caught my attention. It was something like:

Active Internet connections (including servers)
Proto Recv-Q Send-Q  Local Address          Foreign Address        (state)
                  192.168.1.67:12349   192.168.1.254:53  ESTABLISHED

I just wondered why i was getting connection from a source port of 53 on my router to my OpenBSD box?
Any thoughts?.
regards

[rocket357]

Sounds to me like your machine was performing a dns query the instant you ran netstat. What's the output of "grep nameserver /etc/resolv.conf"?

[J65nko]

Your local address is 192.168.1.67. It is using port 12349 as source to do a DNS query to IP address 192.168.1.254 (foreign address) on port 53 (the reserved port for DNS queries).

Nothing wrong

[unixjingleman]

Thanks for your speedy replies. I just remembered the reason that i thought that it might have been a security incident. On my MacBook, in the firewall logs, it logs such connections as "stealth mode connection attempts". I thought that it might have been a security incident due to these logs. Then i remembered that as far as hosts on my LAN are concerned the DNS server is the router. So yeah thanks for that.
regards