search for: logegd

...time these events were being logged I was still able to telnet to port 25 from a remote network to the xxx.xxx.xxx.xxx interface, so clearly something bogus was going on. Email was still coming in and out at a heavy but not ridiculous rate. Note also that only some connections to port 25 were logegd this way, the test telnet''s to port 25 showed only in the mail log not at all on the firewall. I also noted that I was getting a huge increase in the number of "NEW" packets not marked as SYN which viewed as follows... NEW NOT SYN!: IN=ppp0 OUT= MAC= SRC=203.57.xxx.xxx DST=xxx...