[Logwatch] port 1095

Kirk Bauer kirk@kaybee.org
Sun, 16 Jun 2002 19:19:24 -0400 (EDT)

On Thu, 30 May 2002, Armando Soto Baeza wrote:

> I am using logwatch 2.6.1 and have noticed that my firewall denies
> multiple access tries to port 1095. This morning I realized that these
> connections are just answers for request made by my host into other
> machines in the internet. I am requesting from port 1095 and,
> receiving respondes into the same port. Further, it appears to be
> during the daily execution of logwatch that this happens. The question
> is: Is logwatch trying to make such connections? In the case it is,
> what for?

I have no idea.  The only outgoing connections logwatch initiates are
DNS lookups.  What was the destination port?  If it was 53, that would
explain the traffic.

 Kirk Bauer -- CmpE, Georgia Tech -- kirk@kaybee.org -- Avid Linux User
     http://linux.kaybee.org | www.autorpm.org | www.logwatch.org
    Opinions expressed are my own, but they should be everybody's.