Re: [Dovecot] rkhunter alert dovecot using port 1984

[Peter Evans]

mailhub:~# netstat -tulnap | grep 2006
tcp        0      0 10.0.0.24:143           10.0.3.96:2006 ESTABLISHED 
19372/imap
This all looks ok - The client should be communcating over a higher port right?

perfectly normal, if your rkhunter is freaking out because its seeing remote 
ports
that it doesn't like, it needs to take some valium. Anything over 1024 is fair 
game
for unprivileged stuff like mail clients.

   P
   on 10.0.0.6 ^^;