🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: demon.security
Article #2

Re: Demon SMTP probes

#2
From: Paul Womar
Date: Sat, 01 Apr 2000 00:00
35 lines
2224 bytes
Mark Hughes <mark@compware.co.uk> wrote:

> I've recently installed a nifty personal firewall and it is showing me
> that demon is looking for a service on port 25 (SMTP). Two machines
> probe my machine periodically while I am dialed in, and curiously they
> probe from apparently random source ports. See below for some sample
> probes....

I don't know too much of the specifics but I persume they are sending
from different ports due to the fact they will be sending mailt o many
different customers.

> 194.217.242.6 (punt-21 mail.demon.net) port 59652 to port 25
> 194.217.242.34 (punt-11 mail.demon.net) port 44003 to port 25
> 194.217.242.6 (punt-21 mail.demon.net) port 61112 to port 25
> 194.217.242.34 (punt-11 mail.demon.net) port 45586 to port 25
> 194.217.242.6 (punt-21 mail.demon.net) port 62413 to port 25
> 194.217.242.34 (punt-11 mail.demon.net) port 47000 to port 25
> 
> I don't wish demon to probe my machine for TCP/IP services.

> Can someone explain why demon appears to be probing my machine when I
> dial in?

They are actually attempting to deliver your email by SMTP which is part
of the service, it allows email to be "pushed" to your machine so you
don't need to keep checking to see if new email is available, it also
allows you to reject email based on who it is to or from.

> Is it part of the service agreement that they are able to do this?

It's part of the service, SMTP and static IP are 2 services that Demon
offer that distinguish them from many others.
-- 
-> The email address in this message *IS* Valid <-
Technical Details
Message-ID: <1e8fbw2.15cmxc8g9u7xfN%{$PW$}@womar.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1065b6,fefb3eeb89e1f549
X-Google-Attributes: gid1065b6,public
X-Google-Thread: 1004db,fefb3eeb89e1f549
X-Google-Attributes: gid1004db,public
From: {$PW$}@womar.co.uk (Paul Womar)
Subject: Re: Demon SMTP probes
Date: 2000/04/01
Message-ID: <1e8fbw2.15cmxc8g9u7xfN%{$PW$}@womar.co.uk>
X-Deja-AN: 605336676
References: <954609562.14748.0.nnrp-13.9e98ed62@news.demon.co.uk>
Mail-Copies-To: never
Organization: Posted via Supernews, http://www.supernews.com
User-Agent: MacSOUP/2.4.4
Newsgroups: demon.security,demon.ip.support
X-Complaints-To: newsabuse@supernews.com