Topic: traffic to remote site port 25

[mike_mattos]

I'm suddenly seeing (iptraf) activity from my SME6 system external network port, directed to a couple of IP addresses ( one is 199.198.32.22:25 ) , from a range of ports on my machine, looks almost like my machine is sending TO that address from all ports on my machine in sequence.

The traffic slows periodically, but looks like about 100k per second is transfering!

I removed my local network cable, had no effect!

YIPES!javascript:emoticon(':-x')
Mad

[mike_mattos]

further analysis,
\var\qmail\queue\bounce had thousands of entries!

I edited a couple, they did not show my domain in the addresses!

So , where & how they got there, I do not know.

clam didn't seem to object to them I sent an EICAR file to confirm clam, and also updated clam to today.

So system speed is restored, mystery remains!