Kathy,
Generally it's an alias for SMTP.
Look through the firewall services(most likely you
did this), the /etc/services or $systemroot/system32/drivers/etc.
Sounds like someone may have added this. Are you
new to this system or administrating your fw? If so,
you will want to verify _everything_ about that system(s),
to make sure you understand why it designed & configured
the way it is. Obviously (and _carefully_) disabling anything
that you cannot verify is needed.
If not, my apologies for making such a blunderous
ASSumption. :)
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> "Kathy Chapman" <[EMAIL PROTECTED]> 8/30/00 9:52:20 AM >>>
>
>Checkpoint 4.0 on Solaris
>
>The log is showing dropped tcp traffic for service "mail" to my SMTP server. I have
>a service SMTP
>which is defined as TCP port 25 (which works fine). I have been unable to find out
>which port is
>associated with this "mail" service - it's not defined in my rulebase.
>
>The rule that's dropping it is NOT: any, any, annoying-services, drop.
>The cleanup rule is dropping it: any, any, any, drop.
>
>Any help is greatly appreciated.
>
>Kathy Chapman
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
