[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Odd traffic to munition2.xs4all.nl, any ideas?

On 03 Sep 2002 17:32:45 -0500
"Guy T. Rice" <guy@aurum-industries.com> wrote:

> I have a Debian box acting as a mailserver running Exim behind a Debian
> box acting as a firewall/gateway with appropriate port forwarding etc. 
> Everything runs fine.  I've been seeing some odd traffic lately,
> though.  An SMTP request will come in and be forwarded to the
> mailserver, the mailserver responds by opening a 113 (auth) connection
> back to the caller, and then, a 7 (echo) and then 2702 (?!) to
> munitions2.xs4all.nl for no apparent reason.  Any ideas?

You using Vipul's Razor by any chance?  Here's why I ask:

$ telnet munitions2.xs4all.nl 2702
Connected to munitions2.xs4all.nl.
Escape character is '^]'.
Vipul's Razor 1.11, protocol version 2.

Looks to me like your mail server is checking the Razor database.

Jamin W. Collins

Reply to: