All; Ok, I'm ready to dump the whole thing in the bay. I have a server gone mad.
After a power failure, the server came back in a very unstable state. So far, any efforts to fix it, seem to only make it worse. Every time I think I have it fixed, something else seems to go wrong. As it stands, "most" everything seems to be working, except mail. Im running imap on it. Any effort to check the mail, from either inside, or outside the lan results in the address of the host checking the mail getting blocked. The following lines get added to /var/log/messages Jan 12 16:29:36 ibu portsentry[2696]: attackalert: TCP SYN/Normal scan from host: chantika.keluarga.lan/192.168.100.3 to TCP port: 143 Jan 12 16:29:36 ibu portsentry[2696]: attackalert: Host 192.168.100.3 has been blocked via wrappers with string: "ALL: 192.168.100.3" Can anyone shed some light on what's causing any effort to check the mail to be interpreted as an SYN attack? in short: HELP!!!!! THanks!! Ric
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
