My reading of the entry. Subject to random incorrectness :-) You're logging accepts on your firewall, (ACCEPT) which might be a bit rash, as you'll fill your logs pretty quickly.
The box 132.181.30.7 is trying to send your box (10.0.0.5 I assume) something to the smtp port as a reply (tcp, port 25) to an established session from that port (no SYN flag). Dunno what else I can say. If you are not expecting connections to that box for mail delivery someone might be playing with that box. I assume you're on a dial-up or ADSL and this log is from a masq box between you and the net? Cheers, Chris Hellyar. -----Original Message----- From: Guy Steven [mailto:[EMAIL PROTECTED]] Sent: Monday, 22 April 2002 12:14 p.m. To: [EMAIL PROTECTED] Subject: regyva.canterbury.ac.nz Can anyone throw light on why the following appears in the messages file on my firewall: Apr 21 06:15:42 gateway kernel: Packet log: input ACCEPT eth0 PROTO=6 132.181.30.7:2844 10.0.0.5:25 L=75 S=0x00 I=23583 F=0x4000 T=53 (#13) 132.181.30.7 resolves to regyva.canterbury.ac.nz Guy Steven ###################################################################### The contents of this e-mail message may be privileged and/or confidential. If you are not the intended recipient please delete the message and notify the sender. Any views or opinions presented are solely those of the author, and do not necessarily represent the official position of the Selwyn District Council ######################################################################
