[Dshield] Odd Behavior?

Linda Jenkins LJenkins at petersonfarms.com
Mon May 13 14:12:43 GMT 2002


Below is a snip from my Watchguard Firebox log. I have it set up to deny pings and auto block those sites. When one particular mail sever attempts to send mail to me it gets blocked because it also attempts to ping me. Has anyone seen this type of behavior or know why their mail server might be doing this.

allow	in eth0 44 tcp 20 45 35.9.5.24 208.XXX.XXX.XXX 53420 25 syn (SMTP)	
deny in eth0 1500 icmp 20 240	35.9.5.24 208.XXX.XXX.XXX 8 0 (Ping)
deny in eth0 40 tcp 20 45 35.9.5.24 208.XXX.XXX.XXX 53420 25 ack (blocked site)

Thanks,
Linda




More information about the list mailing list