On Thu, 23 May 2002, Jim Van Eeckhoutte wrote:
> what does this mean, i did a telnet mail.server.com 25 twice and ....
>
> tcp 6 67 SYN_SENT src=192.168.20.5 dst=208.57.74.68 sport=2375
dport=25 [UNREPLIED] src=208.57.74.68 dst=63.27.24.209 sport=25 dport=2375 use=1
> tcp 6 117 SYN_SENT src=192.168.20.5 dst=24.130.14.117 sport=2376
dport=25 [UNREPLIED] src=24.130.14.117 dst=63.27.24.209 sport=25 dport=2376
use=1
>
It means that the first step of the 3-way TCP handshake was complete (at
least from what the firewall can tell). The SYN packet was sent from your
client (192.168.20.5) to two different SMTP servers but no SYN-ACK was
received back.
-Tom
--
Tom Eastep \ Shorewall - iptables made easy
AIM: tmeastep \ http://www.shorewall.net
ICQ: #60745924 \ teastep@shorewall.net