|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Connect attempts with SMTP as the SOURCE port??
Title: Connect attempts with SMTP as the SOURCE port?? OK folks, I hate to ask TOO dumb a question, BUT... In the last several months, I've started seeing many hundreds of requests per day to connect to one of our mail servers, with the SOURCE port listed as SMTP (25) and the DESTINATION listed as a "high port" (like 18049, 22077, 26021, etc). These requests fail, and do not seem to be immediately followed by a request to connect from the same IP address to this mail server's SMTP port. They also do not seem to be preceded by a (recent) connection to the remote IP address from our mail server. So, I'm stumped. Is this: A) Nastiness, and the reason that firewalls were invented... B) A remote SMTP server, attempting to "talk back" on a previously established SMTP connection that the FW has timed out or something... C) Something else I swear I didn't start seeing these until a few months ago... but I could be delusional. Thanks for your help, Peter
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
