On 03 Sep 2002 17:32:45 -0500 "Guy T. Rice" <[EMAIL PROTECTED]> wrote:
> I have a Debian box acting as a mailserver running Exim behind a Debian > box acting as a firewall/gateway with appropriate port forwarding etc. > Everything runs fine. I've been seeing some odd traffic lately, > though. An SMTP request will come in and be forwarded to the > mailserver, the mailserver responds by opening a 113 (auth) connection > back to the caller, and then, a 7 (echo) and then 2702 (?!) to > munitions2.xs4all.nl for no apparent reason. Any ideas? You using Vipul's Razor by any chance? Here's why I ask: $ telnet munitions2.xs4all.nl 2702 Trying 194.109.217.74... Connected to munitions2.xs4all.nl. Escape character is '^]'. Vipul's Razor 1.11, protocol version 2. Looks to me like your mail server is checking the Razor database. -- Jamin W. Collins -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]