Hey Guys
We are getting a lot of port scanning on a domino server.
We can see these kinds of messages on the console after we have added the .ini settings.
Log_Authentication=1 / Log_Connections=1
06/18/2010 12:32:10 PM Opened TCP/IP connection from 999.99.9.999,60524 to 999.99.9.999,80
06/18/2010 12:32:10 PM Closed TCP/IP connection from 999.99.9.999,60524 to 999.99.9.99,80
Notice they open then close immediately & change the port # over & over & over.
Tried to “trap” these with the API callback EM_SMTPCONNECT
From the list - http://www-12.lotus.com/ldd/doc/tools/c/6.0.2/api60ref.nsf/0/CCB2911F1DF6C7AF8525681000480140?OpenDocument
EM_SMTPCONNECT - is not “triggered” on a smtp open like above, only on a SMTP “conversation”.
Has anyone had any joy trying to “catch” these types of scanning with the API (EM) server addin ?
TIA
NG