I monitor my firewall and I noticed number of connections to port 7 of several machines. Port 7 is generally a TCP "echo" service, but I forgot the last time I've seen anyone use it. So....I traced the source to one of our mail servers. This server has recently had qmail-scanner installed with SpamAssassin. I am suspecting that port 7 connection are a part of qmail-scanner operation (somewhat confirmed by the fact that some of the ip's to which these connections go to are listed in .razor.lst file)
Can anyone confirm that this is expected behaviour? I get a bit paranoid when unexpected connections pop up. There are also connections to other ports on those IP's - like 2702. Anyone knows complete list? Thanks -Michael Lasevich _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general