Re: Possible firewall problem?

From: Copelandia Cyanescens (synesthesia_at_ix02x67invalid.net)
Date: 08/30/04 

Date: Sun, 29 Aug 2004 23:40:43 +0000

Jose Maria Lopez Hernandez wrote...

>> What you are seeing are a proper response to an inbound connection from
>> port 4032 on a remote system to your local port 25. The response RST ACK
>> simply means "we're closed, go away". So, it's not a connection
>> initiated from your computer, it's a response to an external connection
>> attempt.

> But it also says that someone it's trying to use him as a relay for spam
> or something. If he doesn't have external clients that have to send mail
> through this computer then someone it's knocking at his door to send
> spam, probably...

Or it could mean that he has a dynamic IP whose previous owner had an
SMTP server set up. Or that someone simply misconfigured a mail client
or other SMTP service. Or that someone is simply randomly probing for
open mail servers...

The important thing is that no connection is being made, and nobody is
actually *able* to use his machine as a SPAM host. Unless the traffic
volume causes problems it's probably nothing to worry about. Pretty
normal stuff, really. 

-- 
"Why can't the Jews and Arabs just sit down together and settle
this like good Christians?" 
                            -- British statesman Arthur Balfour