Probably, but we only pass a small number of ports (via NAT translation)
through our firewall.
We see port scans frequently against our entire address block... and the
firewall is (should be) intercepting it.
Thanks
At 06:12 PM 11/29/2005, you wrote:
Have you had a portscan on the ip address from outside your network???
Kevin Bilbee
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Chris Ulrich
> Sent: Tuesday, November 29, 2005 12:26 PM
> To: [email protected]
> Subject: RE: [IMail Forum] Phantom Postmaster accounts?
>
>
> I don't think so, but we'll go through and double check. Good
> tip. Thanks
>
>
> At 02:51 PM 11/29/2005, you wrote:
> >The admin account may have been compromised. Through webmail. Does an
> >account have domain admin access and web access???
> >
> >
> >Kevin
> >
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] Behalf Of Chris Ulrich
> > > Sent: Tuesday, November 29, 2005 11:36 AM
> > > To: [email protected]
> > > Subject: [IMail Forum] Phantom Postmaster accounts?
> > >
> > >
> > > We checked two of the domains on our server and, under USERS, we see:
> > >
> > > p
> > > po
> > > pos
> > > post
> > > postm
> > > postma
> > > postmas
> > > postmast
> > > postmaste
> > > postmaster
> > >
> > > as POP accounts.... I don't know if this is the result of a
> > > hack attempt,
> > > a glitch in IMail or something else.
> > >
> > > Has anyone seen this previously? Our mail server is behind a
> firewall,
> > > only HTTP, Port 25 and 110 access, so I'm not *overly* concerned that
> > > someone is terminal servicing in to the box. But I use
> "overly" pretty
> > > losely right now....
> > >
> > > Has anyone seen anything like this previously?
> > >
> > > Thanks
> > >
> > >
> > >
> > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> > > List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> > > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> > > ---
> > > [This E-mail scanned for viruses by Declude Virus]
> > >
> > >
> > >
> >
> >---
> >[This E-mail scanned for viruses by Declude Virus]
> >
> >
> >To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> >List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> >Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
>
>
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
