Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Feb 2002 20:23:04 -0700
From:      "Mike Roest" <bsd-lists@blahz.ab.ca>
To:        "'Ozzie Gurkan'" <listdog1@mindspring.com>, <freebsd-questions@freebsd.org>
Subject:   RE: Suspicious connection to yahoo.com port 25 from my machine???
Message-ID:  <000001c1b5d0$1781eba0$845d4018@zeus>
In-Reply-To: <001b01c1b5ce$94c6c6f0$8119fea9@OGURKAN>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
That would be your sendmail daemon if you're actually using your machine
as a mail server.  As SMTP is runs on port 25, if you use the gateway as
a SMTP server you send messages to port 25 on the gateway.  It then
opens an unrestricted port (>1024) and connects to port 25 of the MX
server for yahoo. So are you by chance send email to either people who
use yahoo for there email or to any Yahoo Groups?  If so there is your
answer, if not I would see if anyone else is sending email to people at
yahoo, but I would say that that is your most likely explaination.

--Mike

-----Original Message-----
From: owner-freebsd-questions@FreeBSD.ORG
[mailto:owner-freebsd-questions@FreeBSD.ORG] On Behalf Of Ozzie Gurkan
Sent: Thursday, February 14, 2002 8:12 PM
To: freebsd-questions@freebsd.org
Subject: Suspicious connection to yahoo.com port 25 from my machine???

I supposedly have nothing running on my computer that would make a port
25
request except for the default daemons such as sendmail, sshd, ftpd, and
telnetd. I also have mysqld, tomcat, and apache. I have been watching my
router logs and the machine keeps going to port 25 from port 18xx on my
machine. How do I find out what application is doing that on FreeBSD? Is
it
my time server?


Thanks,
Ozzie Gurkan
Manheim Interactive
Software Engineer
404-269-8776



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?000001c1b5d0$1781eba0$845d4018>