Comments on: How can I find out what application or executable is sending dns mx queries to my router? http://www.domena.lapy.pl/2009/06/30/how-can-i-find-out-what-application-or-executable-is-sending-dns-mx-queries-to-my-router/ Domain settings Sun, 26 Jun 2011 08:09:36 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Ladadadada http://www.domena.lapy.pl/2009/06/30/how-can-i-find-out-what-application-or-executable-is-sending-dns-mx-queries-to-my-router/comment-page-1/#comment-25 Ladadadada Wed, 01 Jul 2009 18:40:01 +0000 http://www.domena.lapy.pl/2009/06/30/how-can-i-find-out-what-application-or-executable-is-sending-dns-mx-queries-to-my-router/#comment-25 There is a program for the Mac called Little Snitch. It is essentially a Firewall with a simple-to-use interface. It blocks all outbound traffic and allows you to make exceptions to this rule. The nice thing about these exceptions is that they can be on an application by application basis. I can allow Firefox to connect to port 80 but not allow Safari if that's what I want to do. You could allow udp connections on port 53 to each application individually until you find the one that is doing the MX requests. (Being an MX request I would suspect your email program first... but a spam sending engine would generate a LOT of dns MX requests. It depends on what you mean by "a lot") I did a search for Little Snitch equivalents for Windows and apparently there's not much available. Some reports say to try ZoneAlarm, Comodo or Outpost for Windows. There is a program for the Mac called Little Snitch. It is essentially a Firewall with a simple-to-use interface.

It blocks all outbound traffic and allows you to make exceptions to this rule. The nice thing about these exceptions is that they can be on an application by application basis. I can allow Firefox to connect to port 80 but not allow Safari if that’s what I want to do.

You could allow udp connections on port 53 to each application individually until you find the one that is doing the MX requests. (Being an MX request I would suspect your email program first… but a spam sending engine would generate a LOT of dns MX requests. It depends on what you mean by “a lot”)

I did a search for Little Snitch equivalents for Windows and apparently there’s not much available. Some reports say to try ZoneAlarm, Comodo or Outpost for Windows.

]]>