Re: UDP Port 137 - Now TCP 143

[lk-m-wizards () bigears solsoft com (Lorens Kockum)]

On firewall-wizards jburgess () railtex com wrote:
> [...] Does anyone know why
> would someone/something be hitting TCP port 143?

That's IMAP (v2 and I believe v1 as well).  I suppose that if it
wasn't filtered out, someone might get somebody else's mail that
way, though the appropriate password should be needed.

I suppose it *could* be a laptop normally on your network on
holiday in .do, but if that is not the case (maybe you don't
even use IMAP?) then yes, someone is probably trying to sound
out your weaknesses...  Do run-of-the-mill crackers try to read
mail before having managed to crack the system?

-- 
#include <std_disclaim.h>                          Lorens Kockum