Port 25 Issue!
-
Port 25 Issue!
i am noticing that my internet is always busy even while there is no visible activity; netstat gave the following report:
Active Connections
Proto Local Address Foreign Address State
TCP GOD:3658 *.s7a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:3668 atl1.mail.nasco.com:smtp FIN_WAIT_1
TCP GOD:3717 mail.claro.com.pe:smtp FIN_WAIT_1
TCP GOD:3736 atl1.mail.nasco.com:smtp FIN_WAIT_1
TCP GOD:3747 wscdns.tgnet.cz:smtp FIN_WAIT_1
TCP GOD:3751 ik-in-f27.google.com:smtp FIN_WAIT_1
TCP GOD:3754 213.0.96.11:smtp FIN_WAIT_1
TCP GOD:3778 *.s6b1.psmtp.com:smtp TIME_WAIT
TCP GOD:3785 mail0.cro-sss.de:smtp FIN_WAIT_1
TCP GOD:3796 mailserver.desarrollosocial.gov.ar:smtp FIN_WAIT_1
TCP GOD:3802 email.cib.gov.tw:smtp FIN_WAIT_1
TCP GOD:3805 213.0.96.11:smtp FIN_WAIT_1
TCP GOD:3856 correodeempresas.telefonica.es:smtp FIN_WAIT_1
TCP GOD:3857 *.s6b1.psmtp.com:smtp TIME_WAIT
TCP GOD:3879 mailserver.desarrollosocial.gov.ar:smtp FIN_WAIT_1
TCP GOD:3895 *.s7a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:3899 sf1.jacksonnational.com:smtp FIN_WAIT_1
TCP GOD:3920 66-17-22-103.biz.sktn.arrival.net:smtp FIN_WAIT_1
TCP GOD:3937 email.cib.gov.tw:smtp FIN_WAIT_1
TCP GOD:3956 ik-in-f27.google.com:smtp TIME_WAIT
TCP GOD:3962 ns1.riviera-tourisme.com:smtp FIN_WAIT_1
TCP GOD:3983 *.s6b2.psmtp.com:smtp TIME_WAIT
TCP GOD:3992 *.s7a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:3994 65.55.251.22:smtp TIME_WAIT
TCP GOD:4003 58.93.255.223:smtp FIN_WAIT_1
TCP GOD:4011 mail-gw.intownsuites.com:smtp TIME_WAIT
TCP GOD:4013 *.s6a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:4015 fallback.ip-plus.net:smtp TIME_WAIT
TCP GOD:4020 smtp.uc.pt:smtp FIN_WAIT_1
TCP GOD:4028 195.242.120.9:smtp FIN_WAIT_1
TCP GOD:4029 mta-v10.mail.vip.mud.yahoo.com:smtp FIN_WAIT_1
TCP GOD:4030 mail.nationalapartmentfinance.com:smtp FIN_WAIT_1
TCP GOD:4046 224.host.terra.es:smtp FIN_WAIT_1
TCP GOD:4059 144.140.80.13:smtp FIN_WAIT_1
TCP GOD:4060 ik-in-f27.google.com:smtp TIME_WAIT
TCP GOD:4061 209.66.101.140:smtp FIN_WAIT_1
TCP GOD:4063 ns1.riviera-tourisme.com:smtp FIN_WAIT_1
TCP GOD:4071 eforwardct.name-services.com:smtp FIN_WAIT_1
TCP GOD:4074 wagner.liuc.it:smtp FIN_WAIT_1
TCP GOD:4077 mail1.brenntagla.com:smtp FIN_WAIT_1
TCP GOD:4083 204.17.28.37:smtp FIN_WAIT_1
TCP GOD:4089 host-200-94-71-189.block.alestra.net.mx:smtp FIN_WAIT_1
TCP GOD:4099 *.s6a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:4102 *.s6b2.psmtp.com:smtp FIN_WAIT_1
TCP GOD:4105 nasmtp.jnj.com:smtp FIN_WAIT_1
TCP GOD:4107 ccmrin1.corp.dcn.yahoo.com:smtp FIN_WAIT_2
TCP GOD:4108 *.s7a1.psmtp.com:smtp FIN_WAIT_1
TCP GOD:4113 e-zone3.e-corp.net.ar:smtp FIN_WAIT_1
TCP GOD:4121 cluster-d.mailcontrol.com:smtp FIN_WAIT_1
TCP GOD:4122 57-162.tor.economux.com:smtp FIN_WAIT_1
TCP GOD:4125 mta-v10.mail.vip.mud.yahoo.com:smtp FIN_WAIT_1
TCP GOD:4126 224.host.terra.es:smtp FIN_WAIT_1
TCP GOD:4132 printingimagesctc.com:smtp FIN_WAIT_1
TCP GOD:4133 mail.cedro.ind.br:smtp FIN_WAIT_1
TCP GOD:4138 ftp.tchub.net:smtp FIN_WAIT_1
TCP GOD:4141 mx2002.mx2.got.net:smtp FIN_WAIT_1
TCP GOD:4142 ds3976.dedicated.turbodns.co.uk:smtp FIN_WAIT_1
TCP GOD:4149 mhb-02-pao.mailhop.org:smtp FIN_WAIT_1
TCP GOD:4150 mta-v1.mail.vip.cnb.yahoo.com:smtp FIN_WAIT_1
TCP GOD:4152 207.191.184.198:smtp FIN_WAIT_1
TCP GOD:4154 antespam.com:smtp FIN_WAIT_1
TCP GOD:4157 189-21-2-66.ded.intelignet.com.br:smtp FIN_WAIT_1
TCP GOD:4163 ns1.riviera-tourisme.com:smtp ESTABLISHED
TCP GOD:4164 117432-www1.sleeplessmedia.com:smtp FIN_WAIT_1
TCP GOD:4168 vulture.skynet.co.uk:smtp LAST_ACK
TCP GOD:4169 mx.brturbo.com.br:smtp ESTABLISHED
TCP GOD:4172 mail12.disney.com:smtp ESTABLISHED
TCP GOD:4173 server24.appriver.com:smtp FIN_WAIT_1
TCP GOD:4174 mx1.free.fr:smtp ESTABLISHED
TCP GOD:4175 mail.icodia.com:smtp ESTABLISHED
TCP GOD:4176 retlifwil1.teampcs.com:smtp FIN_WAIT_1
TCP GOD:4177 213.42.1.72:smtp ESTABLISHED
TCP GOD:4178 wagner.liuc.it:smtp ESTABLISHED
TCP GOD:4179 nasmtp.jnj.com:smtp ESTABLISHED
TCP GOD:4180 mail.infomail.es:smtp ESTABLISHED
TCP GOD:4181 65.74.168.213:smtp ESTABLISHED
TCP GOD:4183 195.141.89.209:smtp ESTABLISHED
TCP GOD:4185 ik-in-f27.google.com:smtp ESTABLISHED
TCP GOD:4191 mta-v10.mail.vip.mud.yahoo.com:smtp LAST_ACK
TCP GOD:4192 rrcs-67-52-60-124.west.biz.rr.com:smtp TIME_WAIT
TCP GOD:4195 213.33.64.178:smtp ESTABLISHED
TCP GOD:4196 smtp-in.orange.fr:smtp LAST_ACK
TCP GOD:4197 66-192-108-195.static.twtelecom.net:smtp ESTABLISHED
TCP GOD:4198 mx.noris.net:smtp FIN_WAIT_1
TCP GOD:4199 tartarus.uwa.edu.au:smtp ESTABLISHED
TCP GOD:4200 dsl.jezuici.pl:smtp ESTABLISHED
TCP GOD:4204 eforwardct.name-services.com:smtp ESTABLISHED
TCP GOD:4205 aquila.bateforte.com.br:smtp ESTABLISHED
TCP GOD:4206 ironportsrv01.telecom.com.co:smtp SYN_SENT
TCP GOD:4207 cluster-b.mailcontrol.com:smtp ESTABLISHED
TCP GOD:4209 e-zone3.e-corp.net.ar:smtp ESTABLISHED
TCP GOD:4211 smtp-in.orange.fr:smtp LAST_ACK
TCP GOD:4212 mail-fwd.mx.g19.rapidsite.net:smtp SYN_SENT
TCP GOD:4213 mail.tiscali.ch:smtp ESTABLISHED
TCP GOD:4214 mail.ingeria.cz:smtp ESTABLISHED
TCP GOD:4215 dxa03.wellsfargo.com:smtp SYN_SENT
TCP GOD:4216 eforwardct.name-services.com:smtp SYN_SENT
TCP GOD:4217 mail.nationaldirect.com:smtp ESTABLISHED
TCP GOD:4218 209.82.57.162:smtp ESTABLISHED
TCP GOD:4219 mta-v10.mail.vip.mud.yahoo.com:smtp ESTABLISHED
TCP GOD:4221 193.126.4.60:smtp ESTABLISHED
TCP GOD:4222 mx01.testnet.rim.net:smtp ESTABLISHED
TCP GOD:4226 mta8.grp.scd.yahoo.com:smtp SYN_SENT
TCP GOD:4227 procmail.norlight.net:smtp ESTABLISHED
TCP GOD:4228 *.s7a1.psmtp.com:smtp ESTABLISHED
TCP GOD:4229 server28.appriver.com:smtp ESTABLISHED
TCP GOD:4230 mta-v10.mail.vip.mud.yahoo.com:smtp ESTABLISHED
TCP GOD:4231 mx.noris.net:smtp ESTABLISHED
TCP GOD:4232 mta-v12.mail.vip.re4.yahoo.com:smtp ESTABLISHED
TCP GOD:4233 mx1.centrum.cz:smtp SYN_SENT
TCP GOD:4234 mailex09.paran.com:smtp SYN_SENT
TCP GOD:4235 mx2.b26.cz:smtp ESTABLISHED
TCP GOD:4236 bne002mz.server-mail.com:smtp ESTABLISHED
TCP GOD:4237 ms14.tcnoc.com:smtp SYN_SENT
TCP GOD:4238 mailfront4.pacific.net.hk:smtp ESTABLISHED
TCP GOD:4239 66-243-81-218.focaldata.net:smtp SYN_SENT
TCP GOD:4240 smtp-in.orange.fr:smtp SYN_SENT
TCP GOD:4241 ip67-90-11-36.z11-90-67.customer.algx.net:smtp SYN_SENT
.... a fairly long one, with port 25 kept busy by so many connections...probably all spammers!... i tried to block port 25 using Emsa port blocker... it does not do a thing!
how can i know what is causing these connections and how to disable them to save my already slow bandwidth?
thanks!
-
I'd suggest reading this post:
http://www.techhelpforum.com/showthread.php?t=3702
Then post a HijackThis Log in that section.
-
thanks a lot... the steps at http://www.techhelpforum.com/showthread.php?t=3702 did help me... i had to repeat it twice... unfortunately i could not specifically find out the culprit so that i could post here..
-
If you post a HijackThis log in the HijackThis log section our Pros will be able to detect any problems therein.