Re: Traffic from port 25 to high ports?

From: Ashish Gupta (ashishg@in.niksun.com)
Date: 09/29/01


Message-ID: <3BB5433D.46573C2D@in.niksun.com>
Date: Sat, 29 Sep 2001 09:12:54 +0530
From: Ashish Gupta <ashishg@in.niksun.com>
To: Matt Simonsen <matt_lists@careercast.com>
Subject: Re: Traffic from port 25 to high ports?


Well there might be a typical case of Port Forwarding which is typical of
ssh. For example I can say that forward all the traffic on port 25 of a
machine X to port 33543 of machine Y using SSH. Where in some cases X and Y
can be the same machine.

Cheers,

ag
Matt Simonsen wrote:

> I am seeing traffic regularly coming from remote servers' port 25
> destined to our servers' high ports, generally in the 1-3k range. Is
> this normal? I plan to block it all, from what I understand SMTP goes
> only from 25 to 25, but if that's the case I can't figure out what this
> would be.
>
> According to our IPFilter logs the traffic generally has -AFP set,
> please let me know off-line if a tidbit of info I could provide can help
> you answer my question.
>
> Thanks
> Matt Simonsen



Relevant Pages

  • Re: ssh gives "Permission denied, please try again"
    ... port 22 on your internal machine, so you will need to keep ssh up to ... I configure the router to forward a different external port to 22 on my ... For good measure pick usernames that are none obvious, ... root/password: 163 times ...
    (uk.comp.os.linux)
  • [NEWS] SSH service at Dell DRAC4 Denial of Service (Mocana)
    ... SSH service at Dell DRAC4 Denial of Service ... Dell Remote Access Card 4 allows customers to effectively manage ... After the use of such a port scanner, ...
    (Securiteam)
  • Re: Remote Desktop directly to another computer on the network
    ... default port... ... And there is no reason for me to believe that ssh ... When I have a multibillion company I will use the key pair, ... WinSCP for that to access my home SSH server. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: SSH safety
    ... SSH safety (J.L. ... FC3 missing KDE menu items ... I was wondering how safe it is to open the ssh port up to the internet. ...
    (Fedora)
  • Re: Mac `owned in hacking competition
    ... the router's port forwarding rules. ... The firewall or a NAT router only stops connections initiated from ... ssh will let you set up forwarded ports in both ... You start an ssh session from the target machine (this is ...
    (uk.comp.sys.mac)

Quantcast