I monitor my firewall and I noticed number of connections to port 7 of
several machines. Port 7 is generally a TCP "echo" service, but I forgot the
last time I've seen anyone use it. So....I traced the source to one of our
mail servers. This server has recently had qmail-scanner installed with
SpamAssassin. I am suspecting that port 7 connection are a part of
qmail-scanner operation (somewhat confirmed by the fact that  some of the
ip's to which these connections go to are listed in .razor.lst file)

Can anyone confirm that this is expected behaviour? I get a bit paranoid
when unexpected connections pop up.

There are also connections to other ports on those IP's - like 2702. Anyone
knows complete list?

Thanks

-Michael Lasevich


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to