Hello Davide and list

in the last few days i become some mails from a sourceforge-list
as i append below.

It seems that it is a spooled file from xmail, as it has the internal
spoolheader included at the top.

Is there an error on the server or what else???

Bye
Michael


-----------------------------
HEADER:

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from sc8-sf-list2.sourceforge.net (66.35.250.206)
        by blackhost.net (217.160.106.201) with [XMail 1.11 (Linux/Ix86)
ESMTP Server]
        id <S1A05> for <[EMAIL PROTECTED]> from
<[EMAIL PROTECTED]>;
        Thu, 23 Jan 2003 17:08:45 +0100
sc8-sf-list2.sourceforge.net;66.35.250.206;blackhost.net;217.160.106.201;=
Thu
, 23 Jan 2003 17: 08:45 +0100;[XMail 1.11 (Linux/Ix86) ESMTP Server]


-----Original Message-----
From: Michael Schwarz=20
Sent: Thursday, January 23, 2003 9:47 PM
Subject:=20
Importance: Low


blackhost.net
S1A05
MAIL FROM:<[EMAIL PROTECTED]> SIZE=3D6656
RCPT TO:<[EMAIL PROTECTED]>
<<MAIL-DATA>>
Received: from sc8-sf-list1-b.sourceforge.net ([10.3.1.13]
helo=3Dsc8-sf-list1.sourceforge.net)
        by sc8-sf-list2.sourceforge.net with esmtp (Exim 3.31-VA-mm2 #1
(Debian))
        id 18bjkw-0003o7-00; Thu, 23 Jan 2003 07:59:06 -0800
Received: from qmail.colloquium.co.uk ([195.206.197.46]
helo=3Dterrapin.colloquium.co.uk)
        by sc8-sf-list1.sourceforge.net with esmtp (Exim 3.31-VA-mm2 #1
(Debian))
        id 18bjjz-0004lO-00
        for <[EMAIL PROTECTED]>; Thu, 23 Jan 2003 07:58:07
-0800
Received: from sbs2000.jacksondicklaw.com (ms.jacksondicklaw.com
[195.206.194.33])
        by terrapin.colloquium.co.uk (8.11.6/8.11.6) with ESMTP id
h0NFvNo10348
        for <[EMAIL PROTECTED]>; Thu, 23 Jan 2003 15:57:23
GMT
MIME-Version: 1.0
Content-Type: text/plain;
        charset=3D"iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Message-ID: =
<[EMAIL PROTECTED]>
X-MS-Has-Attach:=20
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
X-MS-TNEF-Correlator:=20
Thread-Topic: Port Forwarding from Router
Thread-Index: AcLC+Ed/u0mVbi7hEdei8QBgl47q/A=3D=3D
From: "Neil Fraser" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: [IPCop-user] Port Forwarding from Router
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-BeenThere: [EMAIL PROTECTED]
X-Mailman-Version: 2.0.9-sf.net
Precedence: bulk
List-Help: =
<mailto:[EMAIL PROTECTED]?subject=3Dhelp>
List-Post: <mailto:[EMAIL PROTECTED]>
List-Subscribe: =
<https://lists.sourceforge.net/lists/listinfo/ipcop-user>,
        <mailto:[EMAIL PROTECTED]?subject=3Dsubscribe>
List-Id: User mailinglist for the IPCop project.
<ipcop-user.lists.sourceforge.net>
List-Unsubscribe: =
<https://lists.sourceforge.net/lists/listinfo/ipcop-user>,
=09
<mailto:[EMAIL PROTECTED]?subject=3Dunsubscribe>
List-Archive:
<http://sourceforge.net/mailarchive/forum.php?forum=3Dipcop-user>
X-Original-Date: Thu, 23 Jan 2003 15:58:32 -0000
Date: Thu, 23 Jan 2003 15:58:32 -0000

I am using IPcop 0.1.1, together with a Alcatel Speedtouch 530 - which =
=3D
acts as a router and an ADSL connection.
I can access the internet with no problems at all.  My server (running =
=3D
SBS2000) is still connecting to my ISP through another router and ISDN, =
=3D
in order to received emails by SMTP.  Having got the ADSL up and =3D
running, I'd like to now switch over to the ADSL for everything and shut =
=3D
down the ISDN. =3D20
To test that this was going to work before I instructed both ISPs I have =
=3D
been trying to get the Router/IPcop to port forward SMTP to the server.  =
=3D
It hasn't been working - hence the email.  IP's:-
Router external:  213.xxx.yyy.zzz
Router internal:  10.0.0.138
IPcop Red:  10.0.0.1
IPcop Green: 195.xxx.yyy.zzz
Server:  195.xxx.yyy.zzz
Router set alternately to port forward to a default server (10.0.0.1) or =
=3D
specifically Port 25 requests to 10.0.0.1:25, and Port 80 requests to =
=3D
10.0.0.1:80.
IPcop told to forward Port 25 to 195.xxx.yyy.zzz:25 (and similarly with =
=3D
80).
I then tried to telnet to 213.xxx.yyy.zzz:25.  (From external and =3D
internal networks).  No joy.
Having done my research I knew that my ISP may have blocked Port 25 so I =
=3D
tried 80 as well, having set up a web server.  I also tried Port 2525 -> =
=3D
IPcop -> 213.xxx.yyy.zzz:25.  Nada.
IPcop's IDS logs look a bit weird to me:-

Date: 01/23 15:15:58 Name: BAD TRAFFIC same SRC/DST=3D20
Priority: 2 Type: Potentially Bad Traffic=3D20
IP info: 10.0.0.1:64233 -> 10.0.0.1:2525=3D20
References: none found=3D20
=3D20
Date: 01/23 15:15:58 Name: ICMP redirect host=3D20
Priority: 2 Type: Potentially Bad Traffic=3D20
IP info: 10.0.0.138:n/a -> 10.0.0.1:n/a=3D20
References: none found=3D20
=3D20
Date: 01/23 15:33:01 Name: BAD TRAFFIC same SRC/DST=3D20
Priority: 2 Type: Potentially Bad Traffic=3D20
IP info: 10.0.0.1:3048 -> 10.0.0.1:80=3D20
References: none found=3D20
=3D20
Date: 01/23 15:33:01 Name: ICMP redirect host=3D20
Priority: 2 Type: Potentially Bad Traffic=3D20
IP info: 10.0.0.138:n/a -> 10.0.0.1:n/a=3D20
References: none found=3D20

Anyone got the first idea what is going on here?  (Other than an idiot =
=3D
has been set loose with a Linux box for the first time of course)

Neil Fraser

[EMAIL PROTECTED]
John Jackson & Dick
Solicitors
48 Cadzow Street,
Hamilton ML3 6DT
dx HA18
Tel 01698 281747         Fax 01698 891419

Partners -  Euan Stirrat;  Kenneth Miller;  David Darroch

This email is intended only for the addressee named above and may =3D
contain confidential or privileged information.  If you are not the =3D
named addressee or the person responsible for delivering the message to =
=3D
the named addressee, please be kind enough to telephone us immediately. =
=3D
The contents should not be disclosed to anyone nor copies taken. =3D20
If you contact us by email, we may store your name and address to =3D
facilitate communication.
We take reasonable precautions to ensure that our emails are virus free. =
=3D
 However we accept no responsibility for any virus transmitted by us and
recommend that you subject any incoming email to your own virus checking =
=3D
procedures.=3D20



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld =3D Something 2 See!
http://www.vasoftware.com
_______________________________________________
IPCop-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/ipcop-user

-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]

Reply via email to