Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 24 May 2004 14:16:57 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Jonathon McKitrick <jcm@FreeBSD-uk.eu.org>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Repeated connections to port 25 with firewall
Message-ID:  <20040524131657.GC88714@happy-idiot-talk.infracaninophile.co.uk>
In-Reply-To: <20040524122957.GA47602@dogma.freebsd-uk.eu.org>
References:  <20040524122957.GA47602@dogma.freebsd-uk.eu.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--69pVuxX8awAiJ7fD
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, May 24, 2004 at 01:29:57PM +0100, Jonathon McKitrick wrote:
>=20
> This is probably a simple question with a simple answer, but I wasn't sure
> where to look.
>=20
> I recently installed a deny-all firewall and everything is working fine.
> However, I keep getting /kernel log messages about attempts to connect to
> port 25.  Are these just various processes trying to mail their results to
> root, but can't because of the firewall?  Or maybe cron doing the same th=
ing?
>=20
> May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:1101 flags:0x02
> May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:2270 flags:0x02
> May 24 08:05:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:4230 flags:0x02
> May 24 08:10:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:2687 flags:0x02
> May 24 08:15:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:3274 flags:0x02
> May 24 08:20:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:1542 flags:0x02
> May 24 08:25:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f=
rom
> 127.0.0.1:3652 flags:0x02

If you're using sendmail, that the client mail submission instance
trying to hand off a message to the MTA instance.  If you type

    # mailq -Ac

you should be able to see what been queued up.

You will have to alter your firewalling to allow TCP connections
localhost:any -> localhost:smtp in order to get e-mail working on that
machine.

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

--69pVuxX8awAiJ7fD
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAsfXJiD657aJF7eIRAudfAJ9Z+rlJ9dWnimVkNHoQLPFKa3HPVgCffyAB
K6nxzuSDh/WzqCDDbDGBhVk=
=BvwV
-----END PGP SIGNATURE-----

--69pVuxX8awAiJ7fD--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040524131657.GC88714>