----- Original Message -----
From: "Charles Cazabon" <[EMAIL PROTECTED]>
> Perfectly normal behaviour, if Hotmail's DNS is broken, or your resolver
is
> broken.
I agree. Hotmail's DNS is broken. That's not the point.
> It doesn't. snort is lying -- don't worry, it lies about a lot of other
> things, too. Take everything snort says with a grain of salt. Please do
not
> followup with any further snort discussion; it's offtopic for this list.
>
First - thanks for a quick reply.
Snort is just a tool, and my previous post was about qmail, not snort :)
Snort is not lying. You think it took the packet dump out of the blue sky?
I also ran tcpdump and it says the same. Is tcpdump also lying?
Mail server really tries to connect to the DNS with tcp dport 53. It does.
It does. I'm sure.
Any ideas?
Marek
