I'm having trouble understanding my logfiles.
It always shows up with something like this:
10:31:55 Default DROP TCP 62.225.67.172 : 25 → 222.123.219.231 :29679 [RST] len=40 ttl=64 tos=0x00
10:31:57 Default DROP TCP 62.225.67.210 : 25 → 219.156.25.109 : 1134 [ACKPSH ] len=91 ttl=64 tos=0x00
10:32:11 Default DROP TCP 62.225.67.210 : 25 → 125.85.238.68 : 31343 [ACKPSH ] len=91 ttl=64 tos=0x00
10:32:51 Default DROP TCP 62.225.67.172 : 25 → 222.123.219.231 : 29679 [RST] len=40 ttl=64 tos=0x00
It does that all day long.
I have to mention: 62.225.67.X is a public network we're hosting. 62.225.67.210 is the public IP of the ASG.
We set up a DNAT rule for the SMTP Server in our DNZ which translates destination port 2525 to 25 on our smtp server. so the clients have to use port 2525 in their email client to send emails.
I don't know if it has something to do with that, because emails sending works just fine.
I just don't understand why those logs show up.
Any hints?
This thread was automatically locked due to age.