[FW1] Suspicious entry in FW log

[Hoang]

I just saw a bunch of entries in my log generating from my internal mail
server.  The log show drop connections to 3.0.0.2 on UPD port 1090 and 1257.
Those entries are created every minute for the whole day.  I have OWA on my
server, and only allow SSL and SMTP to go thru.  Once I restart the WWW
service, it stop.  I don't see any connection from 3.0.0.2 to my server.
Can someone give some insights to this?

Thanks



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================