DNS Query - reply from unexpected source

if i'll disable it i can't make the test. i don't have access.

 

I tried to access from the F5 itself but i can't for some reason.

 

 

I've did some tries, and in one test i got reply, and second later the error.

 

As you can see, first request is OK (reply back from src port 53)

 

 

$ host google.com 8.8.4.4

 

Using domain server:

 

Name: 8.8.4.4

 

Address: 8.8.4.453

 

Aliases:

 

 

google.com has address 74.125.132.138

 

google.com has address 74.125.132.113

 

google.com has address 74.125.132.101

 

google.com has address 74.125.132.100

 

google.com has address 74.125.132.102

 

google.com has address 74.125.132.139

 

;; reply from unexpected source: 8.8.4.42485, expected 8.8.4.453

 

 

 

 

17:28:56.195424 IP 100.100.100.40.50830 > 8.8.4.4.53: 51931+ A? google.com. (28)

 

17:28:56.195461 IP 100.100.100.40.50830 > 8.8.4.4.53: 51931+ A? google.com. (28)

 

17:28:56.195483 IP 100.100.100.50830 > 8.8.4.4.53: 51931+ A? google.com. (28)

 

17:28:56.282383 IP 8.8.4.4.53 > 100.100.100.40.50830: 51931 6/0/0 A 74.125.132.138,[|domain]

 

17:28:56.282404 IP 8.8.4.4.53 > 100.100.100.40.50830: 51931 6/0/0 A 74.125.132.138,[|domain]

 

17:28:56.282407 IP 8.8.4.4.53 > 100.100.100.40.50830: 51931 6/0/0 A 74.125.132.138,[|domain]

 

17:28:56.282819 IP 100.100.100.40.33146 > 8.8.4.4.53: 25971+ AAAA? google.com. (28)

 

17:28:56.282843 IP 100.100.100.40.33146 > 8.8.4.4.53: 25971+ AAAA? google.com. (28)

 

17:28:56.282856 IP 100.100.100.40.33146 > 8.8.4.4.53: 25971+ AAAA? google.com. (28)

 

17:28:56.369244 IP 8.8.4.4.53 > 100.100.100.40.33146: 25971 1/0/0 AAAA[|domain]

 

17:28:56.369277 IP 8.8.4.4.2485 > 100.100.100.40.33146: UDP, length 56