login
Header Space

 
 

Re: Spamd sending packets from 127.0.0.1 to the outside?

Score:
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Paul de Weerd <weerd@...>
Cc: Peter N. M. Hansteen <peter@...>, <misc@...>
Date: Monday, December 10, 2007 - 12:11 pm

Paul de Weerd wrote:

No problem. The firewall admin told me he was blocking packets from 127.0.0.1
originating from the antispam servers.


It is quite hard to capture as it seems sporadic and servers are heavy loaded:

tcpdump: listening on em0, link-type EN10MB
Dec 10 17:07:18.585359 00:15:17:19:0e:be 00:04:23:09:79:68 0800 113:
127.0.0.1.8025 > 217.132.142.68.2199: FP 959669614:959669673(59) ack 2605929486
win 65535

all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:4557
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:1052
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:1181
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 -> 217.132.142.68:2199       CLOSING:CLOSED

I guess the last one is the one I see on the firewall.

-- 
010100100110010101101110011000010111010101100100
010000010110110001101100011000010111001001100100

[demime 1.01d removed an attachment of type application/x-pkcs7-signature which had a name of smime.p7s]
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 10:14 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Peter N. M. Hansteen, (Mon Dec 10, 10:42 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 11:24 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Paul de Weerd, (Mon Dec 10, 11:50 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Paul de Weerd, (Mon Dec 10, 12:02 pm)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 12:11 pm)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Peter N. M. Hansteen, (Mon Dec 10, 11:47 am)
speck-geostationary