On Fri, Oct 4, 2024 at 2:58 PM Jeremy Harris via Exim-users < exim-users@lists.exim.org> wrote:
> On 04/10/2024 19:04, Johnnie W Adams via Exim-users wrote: > > The SIEM claims that ports 587 and 465 > > are generating traffic on a high-numbered port. > > Urghh. Ports don't generate traffic. > > Sockets are endpoints for traffic, TCP-using sockets > have connections which each have two ports, a local > and a remote - and was initiated from one of those two. > > A TCP connection has packets flowing in both directinos > (in general). > > What does this SIEM actually mean, in its claim? I've been trying to get that explanation from those who drive it. -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
