On Friday, September 3, 2004, 15:08:51, Cycle Rider wrote:
> Blackice is reporting hundreds of TCP probes to port
> 25 on my mail server.  The counts are usually about 3
> attempts from the same IP.
>
> Will a mail server verifying an account exists on my
> imail server cause this behavior?  Is there ever a
> circumstance where it would be normal for a TCP probe
> on port 25?

Sure if you're a spammer sniffing around for an unguarded e-mail server.

> I'm trying to understand if I should let blackice keep
> blocking those probes or allow them?  I don't want to
> block valid mail servers from delivering to us.

What's blackice's definition of a 'probe' vs. a legitimate MUA trying to
deliver mail?

-- 
[EMAIL PROTECTED]     "The avalanche has already started, it is too
Rod Dorman              late for the pebbles to vote." � Ambassador Kosh


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to