10.0 system issuing outbound packets to port 25 smtp to 66.96.214.197

[The Lost Admin]

Ernie,

Did you do an nslookup on the address in question? I did and it is listed as part of the hostnoc.net domain. Googling that domain gets some pretty fishy results in the top 10.

The Lost Admin
thelostadmin at gmail.com



On Mar 21, 2015, at 11:15 AM, Ernie Luzar <luzar722 at gmail.com> wrote:

> My ipfilter firewall logs 2 outbound packets on port 25 every 70 minuets.  There is no LAN behind this box is it must be coming from the
> freebsd 10.0 system or from one of the official installed ports I have.
> Sendmail is disabled and postfix is running in it's place.
> 
> 66.96.214.197,25 tcp is the target public ip address.
> 
> How should I go about finding the running task that is doing this???
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"