At 12:35 PM 9/25/2005 -0500, you wrote:
Lee:
I bleive this is a pretty standard port 25 connection probe, then
disconnect. No email need be gernated or attempted. Like if you:
Eric,
Yes, could be a probe, ...
You can lookup up the owner of the IP, to possibly help determine intent.
but the IPs *OF* these 'probes' are variable eBay, e.g
mxpool01.ebay.com
;; ANSWER SECTION:
mxpool01.ebay.com. 2926 IN A 66.135.197.7
Interstingly enough, adding an 'OK' rule to the whitelist for that Class C
seems to have helped, so I guess we must assume that somehow the eBay
servers got blacklisted on one of the public lists!
Lee
_______________________________________________
CWE-LUG mailing list
[email protected]
http://www.cwelug.org/
http://www.cwelug.org/archives/
http://www.cwelug.org/mailinglist/
