[Sidewinder] SMTP Issues

Sidewinder moderated discussion list sidewinder at adeptech.com
Thu Dec 3 14:16:03 EST 2009


Hey folks:

I have a cluster running 6.1.1.05 and recently we have been getting mail
delays on our SMTP proxy.  The logs show lots of these two events:

 

dec  1 05:44:40 2009 pst  f_kern_tcp a_nil_area t_attack p_majorpid: 0
ruid: 0 euid: 0 pgid: 0 fid: 0 logid: 0 cmd: ''domain:  edomain:  srcip:
<remote sender> dstip: <firewall proxy IP> protocol: 6 srcport: 15904
dstport: 25 srcburb: external information: possible stealth connection
attack

 

nov 29 23:13:55 2009 pst  f_kern_tcp a_nil_area t_netprobe p_majorsrcip:
<remote sender ip> dstip: <firewall proxy IP> protocolname: tcp srcburb:
external srcport: 27709 dstport: 25

 

I can't find anything on these messages.  Can anyone help?

 

Thanks!

 

Randy Baca

 



More information about the Sidewinder mailing list