Results 1 to 3 of 3
  1. #1
    Join Date
    May 2002

    Lots of smtp connections reported by Logwatch?

    I get a security report from logwatch everyday, and of course, always browse through it. Recently, I noticed that I got quite a sh*tload of connections from 1 particular ip, about 4 hops from me (traceroute).

    I'm pretty sure spammers can't relay through my server, but don't know what to think of these connections (200 times more than the other IPs).

    Any toughts on that?

  2. #2
    If you're sure it's not legitimate traffic, it would be a good idea to block that IP at your firewall.

    You sure it's not a service monitor checking to make sure your SMTP service hasn't died?
    fr0zen web hosting solutions

  3. #3
    Join Date
    May 2002
    Ahhh... Oops... I knew it had to be something simple that I'd missed

    Thanks. It's indeed a monitoring service.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts