From owner-freebsd-questions@FreeBSD.ORG Mon May 24 06:19:30 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F76016A4CE for ; Mon, 24 May 2004 06:19:30 -0700 (PDT) Received: from smtp.infracaninophile.co.uk (happy-idiot-talk.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id B382343D39 for ; Mon, 24 May 2004 06:19:29 -0700 (PDT) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) i4ODGvS0089082 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 24 May 2004 14:16:57 +0100 (BST) (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)id i4ODGvPd089081; Mon, 24 May 2004 14:16:57 +0100 (BST) (envelope-from matthew) Date: Mon, 24 May 2004 14:16:57 +0100 From: Matthew Seaman To: Jonathon McKitrick Message-ID: <20040524131657.GC88714@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , Jonathon McKitrick , freebsd-questions@freebsd.org References: <20040524122957.GA47602@dogma.freebsd-uk.eu.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="69pVuxX8awAiJ7fD" Content-Disposition: inline In-Reply-To: <20040524122957.GA47602@dogma.freebsd-uk.eu.org> User-Agent: Mutt/1.5.6i X-Virus-Scanned: clamd / ClamAV version devel-20040524, clamav-milter version 0.71 X-Virus-Status: Clean X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk cc: freebsd-questions@freebsd.org Subject: Re: Repeated connections to port 25 with firewall X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 May 2004 13:19:30 -0000 --69pVuxX8awAiJ7fD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 24, 2004 at 01:29:57PM +0100, Jonathon McKitrick wrote: >=20 > This is probably a simple question with a simple answer, but I wasn't sure > where to look. >=20 > I recently installed a deny-all firewall and everything is working fine. > However, I keep getting /kernel log messages about attempts to connect to > port 25. Are these just various processes trying to mail their results to > root, but can't because of the firewall? Or maybe cron doing the same th= ing? >=20 > May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:1101 flags:0x02 > May 24 08:00:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:2270 flags:0x02 > May 24 08:05:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:4230 flags:0x02 > May 24 08:10:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:2687 flags:0x02 > May 24 08:15:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:3274 flags:0x02 > May 24 08:20:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:1542 flags:0x02 > May 24 08:25:00 neptune /kernel: Connection attempt to TCP 127.0.0.1:25 f= rom > 127.0.0.1:3652 flags:0x02 If you're using sendmail, that the client mail submission instance trying to hand off a message to the MTA instance. If you type # mailq -Ac you should be able to see what been queued up. You will have to alter your firewalling to allow TCP connections localhost:any -> localhost:smtp in order to get e-mail working on that machine. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --69pVuxX8awAiJ7fD Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAsfXJiD657aJF7eIRAudfAJ9Z+rlJ9dWnimVkNHoQLPFKa3HPVgCffyAB K6nxzuSDh/WzqCDDbDGBhVk= =BvwV -----END PGP SIGNATURE----- --69pVuxX8awAiJ7fD--