Print Page | Close Window

Connections every minute - why?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=789
Printed Date: 05 February 2025 at 1:39am


Topic: Connections every minute - why?
Posted By: Guests
Subject: Connections every minute - why?
Date Posted: 04 June 2003 at 3:10am

We are getting a connection every minute like this:

Connection from 192.168.1.18 Originating country : N/A

Disconnect

The 192.168.1.18 is our internal IP (well, similar to it anyway).

Any idea why or what these connections are???

Thanks,

 


Replies:
Posted By: Guests
Date Posted: 04 June 2003 at 3:33am

Sounds like you are either being probed by a SPAMMER using a spoofed address or a internal system is trying to send email to the Filtering server. The 192.168.1.0 address space is a non routable address space reserved for internal networks like. This is why the country is unknown.

You need to make sure that you don't have an internal system trying to send an email through your filtering server. Your internal systems should be using your outgoing mail server not the SpamFilter server.

Posted By: Guests
Date Posted: 04 June 2003 at 9:30am
I have the same thing, but I use Big Brother (bb4.com) to monitor my servers and services so it attempts to conenct every five minutes and I get the same message.

Posted By: Guests
Date Posted: 25 June 2003 at 8:35pm

This looks similar to the Country: N/A that I see in our logs as each email is being processed. We also use a non-routable address space behind a firewall. The way that I read this is that the country of origin is being determined from the IP address from which the email most immediately arrives. Am I right/wrong? Does this mean that the country filters will not work behind firewalls / in non-routable address spaces? If so, is there a work around for this (other than placing SpamFilter on a maching outside the firewall...!)?

Robert


Print Page | Close Window