RE: exchange server attempting to connect to odd ports
From: Martin Pescasio (pescasiomd_at_adelphia.net)
Date: 07/06/05
- Previous message: Jonathan Glass: "Re: exchange server attempting to connect to odd ports"
- Maybe in reply to: Matt Bazan: "exchange server attempting to connect to odd ports"
- Next in thread: Starks, Brad: "RE: exchange server attempting to connect to odd ports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 6 Jul 2005 6:49:19 -0400 To: focus-ms@securityfocus.com
It seems to me to be the new mail message notifications that are generated by the server to the client, which uses a UDP port between 1024 and 65535, which is determined by the client during logon.
During logon the client informs the server the IP and Port where it expects to receive new mail notification messages.
Matt wrote:
"Just rebuilt our exchange box and I see it trying to open connections to
the following udp ports:
1140
3069
This is happening to a 192.168 IP address so it's not getting far but I
find it curious. Happens every minute or so. Have scanned for spyware
and run AV software on the box and both have come up empty. Any other
ideas? Thanks.
Matt"
---------------------------------------------------------------------------
---------------------------------------------------------------------------
- Previous message: Jonathan Glass: "Re: exchange server attempting to connect to odd ports"
- Maybe in reply to: Matt Bazan: "exchange server attempting to connect to odd ports"
- Next in thread: Starks, Brad: "RE: exchange server attempting to connect to odd ports"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
