Why is NEMS trying to Send Emails?
Posted: Mon Aug 14, 2017 9:50 pm
Reinstalled NEMS again, went through the nems-init and nems-update..
I haven't gotten any further than this for lack of time..
However my issue is, I am seeing on firewall logs that NEMS is trying to send emails.. :
I am not sure why..
Traffic is going to [2607:f8b0:400e:c05::6c]:25 [2607:f8b0:400e:c05::6d]:25 This appears to be a Google MX server..?
Have I missed something, has my install been compromised or is this expected?
Seems to try 5 times then stops for 10-20 minutes, this is from the last hour or so
18:51:01
18:51:02
18:51:04
18:51:08
18:51:16
19:09:11
19:09:13
19:09:15
19:09:19
19:09:27
19:22:23
19:22:24
19:22:26
19:22:30
19:22:38
19:52:23
19:52:24
19:52:27
19:52:31
19:52:39
20:09:15
20:09:16
20:09:18
20:09:22
20:09:30
20:22:25
20:22:26
20:22:28
20:22:32
20:22:41
20:37:36
20:37:37
20:37:39
20:37:52
It doesn't try IPv4.. Only those two IPv6 addresses..
It has been trying a lot, and for a while, only tonight I decided to figure out where they were coming from..
I haven't gotten any further than this for lack of time..
However my issue is, I am seeing on firewall logs that NEMS is trying to send emails.. :
I am not sure why..
Traffic is going to [2607:f8b0:400e:c05::6c]:25 [2607:f8b0:400e:c05::6d]:25 This appears to be a Google MX server..?
Have I missed something, has my install been compromised or is this expected?
Seems to try 5 times then stops for 10-20 minutes, this is from the last hour or so
18:51:01
18:51:02
18:51:04
18:51:08
18:51:16
19:09:11
19:09:13
19:09:15
19:09:19
19:09:27
19:22:23
19:22:24
19:22:26
19:22:30
19:22:38
19:52:23
19:52:24
19:52:27
19:52:31
19:52:39
20:09:15
20:09:16
20:09:18
20:09:22
20:09:30
20:22:25
20:22:26
20:22:28
20:22:32
20:22:41
20:37:36
20:37:37
20:37:39
20:37:52
It doesn't try IPv4.. Only those two IPv6 addresses..
It has been trying a lot, and for a while, only tonight I decided to figure out where they were coming from..