No.  We run a SonicWall also and see a lot of various attacks that were
dropped; the source IP might just be spoofed on the hit you got.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Adam Campbell
Sent: Thursday, January 04, 2007 12:14 PM
To: [email protected]
Subject: [IMail Forum] blocked IPs

Our firewall (Sonicwall) has been sending me 'port scan' and 'ping of
death
blocked' alerts for several days now; a few per day.

I checked one IP today, and it belonged to Colgate-Palmolive,
colpal.com.
An IP on the same subnet was listed in IMail's SMTPD Access Control
List.  I
removed that IP, and a personal (not spam) message came through from
that
IP.

Do big companies use port scans and pings of death to get a net admin's
attention, like banging on a door?

adamc


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to