hairpin attempts

[Randy Bush <randy () psg com>]

for some months, our border routers log attempts to connect from the
outside using a source address that is internal to my network.  e.g.

Oct  3 06:48:12 r0 7833: Oct  3 06:48:11.267: %FMANFP-6-IPACCESSLOGP:  SIP0: fman_fp_image:  list serial-in4 denied udp 
147.28.0.223(3465) -> 147.28.0.222(53), 1 packet

some days, we see a *lot* of this.  anyone else seeing similar?

randy