RE: [cobalt-users] RaQ4 - Help with Portsentry on Cobalt RaQ4r

[<rpaiz@xxxxxxxxxxxxxx>]

> The IP address is 192.168.1.1 - isn't this a reserved IP
> address for a local IP network?  I thought it might be the
> Cobalt "talking to itself" - maybe something to do with
> the active monitoring etc.?

In general yes... 192.168.x.x are reserved IP's. As for the Cobalt
talking to itself, *you* should know what IP's you use on your network
and whether the RaQ listens to one of those. You tell us...  :)

> What about the other log entry, every 15 minutes that I get:
>
> Feb 20 10:15:03 www sendmail[1153]: NOQUEUE: localhost
> [127.0.0.1] did not
> issue MAIL/EXPN/VRFY/ETRN during connection to MTA

Something connected to your SMTP server and immediately disconnected.
Sometimes it's a broken connection, sometimes it's an attack, sometimes
it's innocent. In your case, I'd guess that this is the Active Monitor
checking to see that your mailserver is alive and well.

--
Rodolfo J. Paiz
rpaiz@xxxxxxxxxxxxxx <mailto:rpaiz@xxxxxxxxxxxxxx>