Hi, Our mail server got blocked from connecting to port TCP/1206 on a remote mail server. At that time, the remote mail server was delivering mail to us. It was using the source port TCP/1206. Why would our mail server try to connect back to that port?
Nat Log: Feb 8 02:19:55 FW2 NAT: Open tunnel TCP [192.168.79.224/25]<-[207.247.80.133/25]<-[210.42.160.59/1206]. Feb 8 02:20:15 FW2 NAT: Close tunnel TCP [192.168.79.224/25]<-[207.247.80.133/25]<-[210.42.160.59/1206] Pkts 7 3, Bytes 308 132. Feb 8 02:20:16 FW2 NAT: Open tunnel TCP [192.168.79.224/25]<-[207.247.80.133/25]<-[210.42.160.59/1206]. Feb 8 02:20:27 FW2 NAT: Close tunnel TCP [192.168.79.224/25]<-[207.247.80.133/25]<-[210.42.160.59/1206] Pkts 2 1, Bytes 88 44. Filter Log: Feb 8 02:19:55 FW2 FILTER: Remote access filter accepts : TCP vx0 [210.42.160.59/1206]->[207.247.80.133/25] l=0 f=0x2. Feb 8 02:20:16 FW2 FILTER: Remote access filter accepts : TCP vx0 [210.42.160.59/1206]->[207.247.80.133/25] l=0 f=0x2. Feb 8 02:20:27 FW2 FILTER: Outbound filter blocks: TCP xl0 [192.168.79.224/25]->[210.42.160.59/1206] l=0 f=0x12. Feb 8 02:20:35 FW2 FILTER: Outbound filter blocks: TCP xl0 [192.168.79.224/25]->[210.42.160.59/1206] l=0 f=0x12. Feb 8 02:20:51 FW2 FILTER: Outbound filter blocks: TCP xl0 [192.168.79.224/25]->[210.42.160.59/1206] l=0 f=0x12. Thanks! -- Alex Baram System Administrator (303) 298-7478 x1209 http://www.xig.com --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] To subscribe to the digest version first unsubscribe, then e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
