[Logwatch] port 1095
Sun, 16 Jun 2002 19:19:24 -0400 (EDT)
On Thu, 30 May 2002, Armando Soto Baeza wrote:
> I am using logwatch 2.6.1 and have noticed that my firewall denies
> multiple access tries to port 1095. This morning I realized that these
> connections are just answers for request made by my host into other
> machines in the internet. I am requesting from port 1095 and,
> receiving respondes into the same port. Further, it appears to be
> during the daily execution of logwatch that this happens. The question
> is: Is logwatch trying to make such connections? In the case it is,
> what for?
I have no idea. The only outgoing connections logwatch initiates are
DNS lookups. What was the destination port? If it was 53, that would
explain the traffic.
Kirk Bauer -- CmpE, Georgia Tech -- firstname.lastname@example.org -- Avid Linux User
http://linux.kaybee.org | www.autorpm.org | www.logwatch.org
Opinions expressed are my own, but they should be everybody's.