Re: Sudden activity on smtp port
From: Michal Jaegermann (michal@gortel.phys.ualberta.ca)
Date: 12/17/02
- Next message: Tc: "route add $attacker localhost - viable?"
- Previous message: Mark: "Sudden flood of ARP messages?"
- In reply to: John Oliver: "Re: Sudden activity on smtp port"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Michal Jaegermann <michal@gortel.phys.ualberta.ca> Date: 17 Dec 2002 01:32:15 GMT
John Oliver <joliver@john-oliver.net> wrote:
>
> If there's no MX record pointing to that machine, then it probably
> doesn't need to handle mail.
Let's say that in this case "probably" has a very low probability. :-)
> I would kill the SMTP daemon... that'll
> solve the issue.
Of course it would not solve the issue at all because it is not
with the daemon. Regardless that daemon does not see these connection
attempts so it is totally immaterial here if it is running or not.
Actually I was more interested if there is something I should be
aware on other machines which are more accomodating on that port
and this was just a "canary in a coal mine".
Michal
- Next message: Tc: "route add $attacker localhost - viable?"
- Previous message: Mark: "Sudden flood of ARP messages?"
- In reply to: John Oliver: "Re: Sudden activity on smtp port"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
