UDP ports 1923, 1068, 1087. Looks as if it might be random ports. We don't have DNS service enabled on the 2000 server.
-----Original Message----- From: Mikko Pludra [mailto:[EMAIL PROTECTED]] Sent: Friday, September 20, 2002 11:05 AM To: Exchange Discussions Subject: AW: UDP port probe after moving mailboxes to new 5.5 Server. Hi, sounds like a name resolving issue to me. check the blackice logs whether the traffic originates from UDP 53. My guess is that you have DNS running on your Windows2000 server, which you hadn't under NT. What's the point of running PFs in the net if you have a firewall protecting your network? are your users afraid of internal attacks? regards, Mikko Pludra -----Original Message----- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Sent: Friday, September 20, 2002 8:39 AM To: Exchange Discussions Subject: UDP port probe after moving mailboxes to new 5.5 Server. Exchange 5.5 SP4 We just installed a new Exchange 5.5 server under Windows 2000 and are moving mailboxes onto the new system. I've had a few users who are running blackice on the desktop that are now stating that their accounts are receiving a UDP probe from the new mail system and they are wondering why that is occurring. I thought maybe it's something to do with new mail notification, but I don't understand why it would not have occurred on the old systems. I should state that the old server is running NT 4.0 versus 2000 for the new box. Pete Pfefferkorn Senior Systems Engineer/Mail Administrator University of Cincinnati 51 Goodman Street Cincinnati, OH 45221 Phone - (513) 556-9076 Fax - (513) 556-2042 _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]