PlusNet documents suggest:
�Preferred DNS server: 212.159.13.49
�Alternate DNS server: 212.159.13.50
and these were set on the router
However the Router appears to be using 212.159.6.10 and 212.159.6.9.?!?
This came to light as I've been running router logs on firewall and usage we cannot account for (6.76Mbs worth on Sunday midnight-8am).
Looking at the logs, no traffic was seen last night, but during the working day a p2p block (edonkey p2p block) was invoked against one of our machines trying to reach the 212.159.13.49 and .50 addresses on port 53. In a way, hope the firewall has got this wrong, and it is in fact a DNS request, or is it in fact something to worry about! Machines are virus scanned btw.
Edited: port 53 in use, not 17 as previously stated!
Edited by deleted (Mon 13-Sep-10 16:59:47)



Print Thread
deleted