Hello,
A daily rkhunter scan produced the following warning, which mentions Postfix.
Is this a false-positive?
Warning: Network TCP port 47107 is being used by /usr/lib/postfix/proxymap.
Possible rootkit: T0rn
Use the 'lsof -i' or 'netstat -an' command to check this.
The suggested commands do not reveal anything bound to port 47107 at the moment
(this scan happened last night, though).
Any indication whether or not this is legitimate behavior on Postfix's part? I
can't find much on this specific message.
Thanks for any help,
-Ben
