That’s strange! 192.168.73.76 is a Gentoo Linux email (Postfix) and web (Apache) server. Why would this server try to contact 66.151.150.12 (d1.cloudmark.com)?
Finally figure out! TCP 7, 2703 and UDP 6277 are used by DCC/Razor. I now have the following rules in /etc/shorewall/rules:
# DCC/Razor specific rules: ACCEPT dmz net tcp 7,2703 ACCEPT dmz net udp 6277 ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/