I see entries like this in my router logs:
src=220.127.116.11 dst=108.x.y.z ipprot=17 sport=53 dport=54789 Unknown inbound session stopped
18.104.22.168 is a DNS server.
A few questions regarding this:
Why is the DNS server trying to contact me?
Do I need to be concerned that it can't reach it's destination?
If so, what can I do to allow it access?
I'll add an update for why a DNS server might be trying to contact me. In this case, after some digging, I found the failure detection in the router behind this one is set to use DNS servers to figure out if one or the other connections to it is down.
One of the suggestions was to run DNS locally. Actually, DNS is being run locally, and I just encountered a problem related to it and came back to update the question.
You see, I am seeing "no address associated with hostname" errors in application code that is trying to reach paypal.
So now I'm wondering if these logs are showing up telling me the local DNS is trying to update from the main DNS, but can't get updates, which means it can't find the external APIs the app depends on.