[Dovecot] rkhunter alert dovecot using port 1984

Timo Sirainen tss at iki.fi
Wed Mar 16 18:23:25 EET 2011


On Wed, 2011-03-16 at 09:54 +0000, Mark Adams wrote:
> Hi Timo,
> 
> I've had another one this morning (on port 2006), and can see its still open
> 
> mailhub:~# netstat -tulnap | grep 2006
> tcp        0      0 10.0.0.24:143           10.0.3.96:2006 ESTABLISHED 19372/imap      
> 
> This all looks ok - The client should be communcating over a higher port
> right?

Yeah. Client is connected to IMAP port.




More information about the dovecot mailing list