From owner-freebsd-questions@FreeBSD.ORG Mon May 24 05:31:05 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D1C6E16A4CE for ; Mon, 24 May 2004 05:31:05 -0700 (PDT) Received: from serenity.mcc.ac.uk (serenity.mcc.ac.uk [130.88.200.93]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0F2F743D31 for ; Mon, 24 May 2004 05:31:05 -0700 (PDT) (envelope-from jcm@FreeBSD-uk.eu.org) Received: from dogma.freebsd-uk.eu.org ([130.88.200.97]) by serenity.mcc.ac.uk with esmtp (Exim 4.20) id 1BSEac-000F42-IE for freebsd-questions@freebsd.org; Mon, 24 May 2004 13:29:58 +0100 Received: from dogma.freebsd-uk.eu.org (localhost [127.0.0.1]) i4OCTwuf047642 for ; Mon, 24 May 2004 13:29:58 +0100 (BST) (envelope-from jcm@dogma.freebsd-uk.eu.org) Received: (from jcm@localhost) by dogma.freebsd-uk.eu.org (8.12.10/8.12.6/Submit) id i4OCTwfd047641 for freebsd-questions@freebsd.org; Mon, 24 May 2004 13:29:58 +0100 (BST) Date: Mon, 24 May 2004 13:29:57 +0100 From: Jonathon McKitrick To: freebsd-questions@freebsd.org Message-ID: <20040524122957.GA47602@dogma.freebsd-uk.eu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Spam-Score: -4.9 (----) X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/) *1BSEac-000F42-IE*mfn8OIX4tDo* Subject: Repeated connections to port 25 with firewall X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 May 2004 12:31:06 -0000 This is probably a simple question with a simple answer, but I wasn't sure where to look. I recently installed a deny-all firewall and everything is working fine. However, I keep getting /kernel log messages about attempts to connect to port 25. Are these just various processes trying to mail their results to root, but can't because of the firewall? Or maybe cron doing the same thing? May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:1101 flags:0x02 May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:2270 flags:0x02 May 24 08:05:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:4230 flags:0x02 May 24 08:10:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:2687 flags:0x02 May 24 08:15:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:3274 flags:0x02 May 24 08:20:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:1542 flags:0x02 May 24 08:25:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 from 127.0.0.1:3652 flags:0x02 jm -- My other computer is your windows box.