[Dshield] Odd Behavior?
LJenkins at petersonfarms.com
Mon May 13 14:12:43 GMT 2002
Below is a snip from my Watchguard Firebox log. I have it set up to deny pings and auto block those sites. When one particular mail sever attempts to send mail to me it gets blocked because it also attempts to ping me. Has anyone seen this type of behavior or know why their mail server might be doing this.
allow in eth0 44 tcp 20 45 220.127.116.11 208.XXX.XXX.XXX 53420 25 syn (SMTP)
deny in eth0 1500 icmp 20 240 18.104.22.168 208.XXX.XXX.XXX 8 0 (Ping)
deny in eth0 40 tcp 20 45 22.214.171.124 208.XXX.XXX.XXX 53420 25 ack (blocked site)
More information about the list