Re: Spamd sending packets from 127.0.0.1 to the outside?

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: Paul de Weerd <weerd@...>
Cc: <misc@...>, Peter N. M. Hansteen <peter@...>
Date: Monday, December 10, 2007 - 12:11 pm

Paul de Weerd wrote:

No problem. The firewall admin told me he was blocking packets from 127.0.0.1
originating from the antispam servers.

>

It is quite hard to capture as it seems sporadic and servers are heavy loaded:

tcpdump: listening on em0, link-type EN10MB
Dec 10 17:07:18.585359 00:15:17:19:0e:be 00:04:23:09:79:68 0800 113:
127.0.0.1.8025 > 217.132.142.68.2199: FP 959669614:959669673(59) ack 2605929486
win 65535

all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:4557
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:1052
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 <- 157.164.187.68:25 <- 217.132.142.68:1181
FIN_WAIT_2:FIN_WAIT_2
all tcp 127.0.0.1:8025 -> 217.132.142.68:2199 CLOSING:CLOSED

I guess the last one is the one I see on the firewall.

--
010100100110010101101110011000010111010101100100
010000010110110001101100011000010111001001100100

[demime 1.01d removed an attachment of type application/x-pkcs7-signature which had a name of smime.p7s]

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 10:14 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Peter N. M. Hansteen, (Mon Dec 10, 10:42 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 11:24 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Paul de Weerd, (Mon Dec 10, 11:50 am)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Paul de Weerd, (Mon Dec 10, 12:02 pm)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Renaud Allard, (Mon Dec 10, 12:11 pm)
Re: Spamd sending packets from 127.0.0.1 to the outside?, Peter N. M. Hansteen, (Mon Dec 10, 11:47 am)