[Dshield] Can someone explain this syslog message?

David C. Hart DavidHart at TQMcube.com
Thu Oct 30 00:19:24 GMT 2003


I notice quite a few of these today:

"Oct 29 18:59:53 mail kernel: IN=eth1 OUT=
MAC=00:09:5b:22:29:d1:00:06:25:e4:ed:a3:08:00 SRC=65.54.167.14 DST=151.
202.16.167 LEN=114 TOS=0x00 PREC=0x00 TTL=49 ID=52413 PROTO=TCP SPT=25
DPT=33165"

This originates from Hotmail. None of us have hotmail accounts but even
if we did, these are dropped packets so they didn't go to a client
browser. This isn't incoming mail - the source port is 25. What am I
missing?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://www.dshield.org/pipermail/list/attachments/20031029/bb2ac491/attachment.bin


More information about the list mailing list