chris at 2002-08-13 19:21 from [EMAIL PROTECTED] wrote: >I recently was sent a log from the firewall on co-located machine here, >and it claims that one of my SIMS servers is trying to connect to the >firewall on port 110. It is trying this every two minutes. > >I see nothing in my SIMS logs to back this up, and I can't think of any >reason why SIMS would try to connect to ANYTHING on port 110. Port 25 I >could at least accept that there is a DNS error somewhere and it thinks >the firewall is another mail server, but am I correct in assuming that >there is NO reason that SIMS would try to connect out to another machine >over POP?
I assume you have verified that there is nothing else on the SIMS machine that might be causing this. >I have been having a hell of a time here with random port deafness, and I >suspect that this wacky firewall log may be related. I am just trying to >rule out the connection really coming from SIMS for a known reason. > >Any of you pros know why SIMS would do this, or if SIMS is even capable >of doing this? Or should I start looking for another cause (like someone >spoofing my server address in an attempt to gain access to the network). Yes, I would do exactly that. However, a connection every 2 minutes does not look like a "crack" attempt - more like a POP3 client. If those firewall logs contain the MAC address, you might be able to show the firewall admin that it is not your machine; :-) or, you will know it is your machine. :-( In any case, it should be a simple matter for the firewall admin to verify this. P.S. Do you know what firewall it is? ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
