All of lore.kernel.org
 help / color / mirror / Atom feed
From: Kurt Tragant <k.tragant@firemail.de>
To: netfilter@lists.netfilter.org
Subject: strange log entries concerning mail server
Date: Thu, 13 Feb 2003 18:03:28 +0100	[thread overview]
Message-ID: <1045155808018141@lycos-europe.com> (raw)

[-- Attachment #1: Type: text/plain, Size: 1230 bytes --]

Hello list,

I have some strange entries in my firewall log concerning our mailserver. Every
day there are numerous entries with packets coming from source ports 850-910 to
a very high destination port. An excerpt, you see below. x.y.z.[0-9]* is the
host outside, a.b.c.d is our mailserver (to protect the innocent ;-)).

Feb 13 08:29:26 localhost kernel: IN=eth0 OUT=eth1 SRC=x.y.z.83 DST=a.b.c.d
LEN=143 TOS=0x00 PREC=0x00 TTL=55 ID=8196 DF PROTO=TCP SPT=859 DPT=56926
WINDOW=24616 RES=0x00 ACK PSH FIN URGP=0
Feb 13 13:32:36 localhost kernel: IN=eth0 OUT=eth1 SRC=x.y.z.83 DST=a.b.c.d
LEN=84 TOS=0x00 PREC=0x00 TTL=55 ID=45926 DF PROTO=TCP SPT=902 DPT=57334
WINDOW=24616 RES=0x00 ACK PSH FIN URGP=0
Feb 13 13:32:45 localhost kernel: IN=eth0 OUT=eth1 SRC=x.y.z.83 DST=a.b.c.d
LEN=84 TOS=0x00 PREC=0x00 TTL=55 ID=45951 DF PROTO=TCP SPT=902 DPT=57334
WINDOW=24616 RES=0x00 ACK PSH FIN URGP=0

For an answer I thank you in advance.

Regards
Kurt Tragant

__________________________________________________________________
Arcor-DSL Flatrate - jetzt kostenlos einsteigen und bis zu 76,18 Euro sparen!
Arcor-DSL gibt es jetzt auch mit bis zu 1500 Mbit/s Downstream! http://www.angebot.arcor.net/cgi-bin/angebot.cgi?key=b13e92247022


             reply	other threads:[~2003-02-13 17:03 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-02-13 17:03 Kurt Tragant [this message]
     [not found] <20030213171002.5495.70915.Mailman@kashyyyk>
2003-02-15 22:05 ` strange log entries concerning mail server Willi Mann
  -- strict thread matches above, loose matches on Subject: below --
2003-02-17 11:20 Kurt Tragant

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1045155808018141@lycos-europe.com \
    --to=k.tragant@firemail.de \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.