how to monitor pop3 port 110 connection

Discussion in 'Server Operation' started by dexjul, May 20, 2010.

  1. dexjul

    dexjul New Member

    Hi Guys,

    How can i monitor pop3 port 110 connection in my Centos box. I think some one attacking port 110.

    How can I prevent the attack. Any tool to see the incoming connection in port 110.


    Thanks
    Dexter
     
  2. Mark_NL

    Mark_NL New Member

    this should work

    iptables -I INPUT -p tcp -m tcp --dport 110 -j LOG --log-prefix "POP3:" --log-level 7 --log-tcp-options

    now you'll get connection attempts on port 110 in your syslog.

    remove it with:

    iptables -D INPUT -p tcp -m tcp --dport 110 -j LOG --log-prefix "POP3:" --log-level 7 --log-tcp-options

    you could use iptraf as well to see any connections incoming on port 110 as well.
     
  3. dexjul

    dexjul New Member

    Hi,

    Thank you for reply.

    We are now able to trace who are attacking.


    Thank you

    Dexter
     
  4. Ben

    Ben ISPConfig Developer ISPConfig Developer

Share This Page