[Dovecot] rkhunter alert dovecot using port 1984
Timo Sirainen
tss at iki.fi
Wed Mar 16 18:23:25 EET 2011
On Wed, 2011-03-16 at 09:54 +0000, Mark Adams wrote:
> Hi Timo,
>
> I've had another one this morning (on port 2006), and can see its still open
>
> mailhub:~# netstat -tulnap | grep 2006
> tcp 0 0 10.0.0.24:143 10.0.3.96:2006 ESTABLISHED 19372/imap
>
> This all looks ok - The client should be communcating over a higher port
> right?
Yeah. Client is connected to IMAP port.
More information about the dovecot
mailing list