Mailing List CGatePro@mail.stalker.com Message #103414
From: Nicolas Hatier <nicolas.hatier@niversoft.com>
Subject: Re: Rejected
Date: Tue, 31 Jul 2012 14:00:49 -0400
To: CommuniGate Pro Discussions <CGatePro@mail.stalker.com>
The port on the right-hand part of the log message is the client port. During TCP operations both sides use a port number. While the server port is usually fixed (25 in this case), the client port is automatically assigned by the TCP stack on the client computer. That port number is transmitted in the TCP packets so replies from the server can contain it too and be "routed" correctly by the tcp stack.

The server logs shows it as it can be relevant info for developers and paranoid firewall administration, but in most case this is nothing to worry about.

On 2012-07-30 19:59, Philip Slater wrote:
While I am sure a developer can provide a better explanation for the number following the IP address I will answer as best I can.

SMTP connection to port [0.0.0.0] shows the first stage of an SMTP connection to the server. All appear like this until a session ID is provided. There should be further SMTP log entries regarding the connection but this is the first.

16:52:28.183 5 SMTP [0.0.0.0]:25 <- [127.0.0.1]:54935 connection request. socket=42
16:52:28.183 4 SMTPI-000001([127.0.0.1]) got connection on [127.0.0.1]:25(wks-85.mv) from [127.0.0.1]:54935


The 0.0.0.0 anywhere in the CGP logs is used as an indication for all IP addresses assigned the server running CGP.

Such as

16:50:54.086 2 SMTP [0.0.0.0]:25 listener ready for connections

Now as best as I can tell based on looking at the log entries on my system, the 54935 is likely a reference to a thread number as it is incremental i.e. filter on ]: and you will see it go up by one for every connection to the CGP server. While your logs for SMTP show gaps, I am sure there were user requests in between the time intervals. Again this is an educated guess based on what I am seeing in the logs. Also likely that it rolls over every so often but I will also note that I have never needed that number in my years of trouble shooting.

Of course development might shed some light on this to improve my skills as well.

On Jul 30, 2012, at 4:43 PM, "David Brookfield" <david.brookfield@city-support.co.uk> wrote:

Apologies I should have said I as confused about the o.o.o.o and the port on the other end.

Sent from my iPad

On 31 Jul 2012, at 00:07, "David Brookfield" <david.brookfield@city-support.co.uk> wrote:

I'm a tad confused about some rejected messages I get the from but 0.0.0.0? Interestingly that 111.125.170 is in our client list.


03:00:26.96 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51644] rejected
03:00:33.36 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51662] rejected
03:00:39.24 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51673] rejected
03:00:48.36 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51685] rejected
03:00:52.70 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51694] rejected
03:00:53.05 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51695] rejected
03:00:53.20 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51696] rejected
03:00:53.34 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51697] rejected
03:00:53.53 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51698] rejected
03:00:53.70 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51699] rejected
03:01:02.42 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51714] rejected
03:01:02.54 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51715] rejected
03:01:03.17 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51718] rejected
03:01:12.40 3 SMTP connection to port [0.0.0.0:25] from [111.125.170.53:51735] rejected


All help very welcome.

David

#############################################################
This message is sent to you because you are subscribed to
the mailing list <CGatePro@mail.stalker.com>.
To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
Send administrative queries to  <CGatePro-request@mail.stalker.com>
#############################################################
This message is sent to you because you are subscribed to
  the mailing list <CGatePro@mail.stalker.com>.
To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
Send administrative queries to  <CGatePro-request@mail.stalker.com>

CommuniGate Pro Training
If interested please contact sales@communigate.com


Learn more about Rich Internet Applications
http://www.communigate.com/pronto/

________________________________________________________

Philip Slater
Professional Services
CommuniGate Systems
p 1 415 383 7164 ext 201
p 1 800 262 4722 ext 201
f 1 415 383 7461
SIP & Email pslater@communigate.com
AIM: stalkersoftware




#############################################################
This message is sent to you because you are subscribed to
   the mailing list <CGatePro@mail.stalker.com>.
To unsubscribe, E-mail to: <CGatePro-off@mail.stalker.com>
To switch to the DIGEST mode, E-mail to <CGatePro-digest@mail.stalker.com>
To switch to the INDEX mode, E-mail to <CGatePro-index@mail.stalker.com>
Send administrative queries to  <CGatePro-request@mail.stalker.com>

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster