Date: Thu, 14 Feb 2002 20:23:04 -0700 From: "Mike Roest" <bsd-lists@blahz.ab.ca> To: "'Ozzie Gurkan'" <listdog1@mindspring.com>, <freebsd-questions@freebsd.org> Subject: RE: Suspicious connection to yahoo.com port 25 from my machine??? Message-ID: <000001c1b5d0$1781eba0$845d4018@zeus> In-Reply-To: <001b01c1b5ce$94c6c6f0$8119fea9@OGURKAN>
next in thread | previous in thread | raw e-mail | index | archive | help
That would be your sendmail daemon if you're actually using your machine as a mail server. As SMTP is runs on port 25, if you use the gateway as a SMTP server you send messages to port 25 on the gateway. It then opens an unrestricted port (>1024) and connects to port 25 of the MX server for yahoo. So are you by chance send email to either people who use yahoo for there email or to any Yahoo Groups? If so there is your answer, if not I would see if anyone else is sending email to people at yahoo, but I would say that that is your most likely explaination. --Mike -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG] On Behalf Of Ozzie Gurkan Sent: Thursday, February 14, 2002 8:12 PM To: freebsd-questions@freebsd.org Subject: Suspicious connection to yahoo.com port 25 from my machine??? I supposedly have nothing running on my computer that would make a port 25 request except for the default daemons such as sendmail, sshd, ftpd, and telnetd. I also have mysqld, tomcat, and apache. I have been watching my router logs and the machine keeps going to port 25 from port 18xx on my machine. How do I find out what application is doing that on FreeBSD? Is it my time server? Thanks, Ozzie Gurkan Manheim Interactive Software Engineer 404-269-8776 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?000001c1b5d0$1781eba0$845d4018>