The netstat was representative of a machine connecting in to your server
to send you messages, as apposed to pop3. Check your maillog to find
out which ip address was checking pop. Some systems record that in
/var/log/secure as well.
Larry.
On Sat, 2004-06-12 at 20:29, Bill Canaday wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Saturday 12 June 2004 06:52 pm, Smitty wrote:
> > What ports were open?
> >
>
> Additionally, LogWatch reports
> Connections:
> Service pop3:
> 192.168.1.100: 1343 Time(s)
>
> Since I was out of town all day, I seriously doubt if I checked the mail quite
> that often.
>
> - --
> http://cannaday.us (genealogy)
> http://organic-earth.com (organic gardening)
> Uptimes below for the machines that created / host these sites.
> 20:27:00 up 14 days, 20:24, 4 users, load average: 0.36, 0.21, 0.08
> 20:18:00 up 38 days, 4:19, 5 users, load average: 0.00, 0.00, 0.00
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.4 (GNU/Linux)
>
> iD8DBQFAy5/XSvjcx4uv21sRAkPSAJ4x/MJteO0uQSJu0f0oGrsT1tJONACeMwiP
> pgGlFT6TkQAO6qWEWDH2vMw=
> =7EXA
> -----END PGP SIGNATURE-----
>
>
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 20:42:25 EDT