[Dshield] Can someone explain this syslog message?
David C. Hart
DavidHart at TQMcube.com
Thu Oct 30 00:19:24 GMT 2003
I notice quite a few of these today:
"Oct 29 18:59:53 mail kernel: IN=eth1 OUT=
MAC=00:09:5b:22:29:d1:00:06:25:e4:ed:a3:08:00 SRC=126.96.36.199 DST=151.
202.16.167 LEN=114 TOS=0x00 PREC=0x00 TTL=49 ID=52413 PROTO=TCP SPT=25
This originates from Hotmail. None of us have hotmail accounts but even
if we did, these are dropped packets so they didn't go to a client
browser. This isn't incoming mail - the source port is 25. What am I
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20031029/bb2ac491/attachment.bin
More information about the list