<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
<font size="-1"><font face="Verdana">Hi List,<br>
<br>
<u><b>Scenario</b></u><br>
Last few days we had perform some audit on internal and external port
scanning to our mail servers in data centers using nmap<br>
<br>
We used to scan all port ranges to all of our mail servers using the <i>-p1-65535
(port range from 1 to 65535) </i>and <i>-sV (Probe open ports to
determine service/version info)</i> option in nmap.<br>
<br>
<u><b>The Problem<br>
</b></u>We notice that after the port scanning, all of our MailScanner
instance stop working on logging to MySQL database.<br>
MySQL database logging is used for MailWatch purposes.<br>
<br>
Note that the problem only happens if we scan from localhost and we
cant replicate the issue if nmap is run from external host.<br>
<br>
>From the MailScanner logs, I can see it logs to MySQL but did not
reflected on my MailWatch list.<br>
<i><br>
Jul 17 15:58:47 mail2 MailScanner[24652]: Logging message
6B638418942.A2C83 to SQL<br>
<br>
</i>Checking the MySQL mailwatch database, the data is not populated at
all.<br>
<i><br>
</i>So I decide to have MailScanner restarted, and everything went fine
again. MailScanner nows populate the data to MailWatch MySQL database
again.<br>
<br>
<u><b>System Tested<br>
</b></u><br>
Linux 2.6.18-128.1.16.el5<br>
This is CentOS release 5.3 (Final)<br>
This is Perl version 5.008008 (5.8.8)<br>
This is MailScanner version 4.77.10<br>
<br>
All perl modules installed except :<br>
missing Mail::ClamAV<br>
missing SAVI<br>
<br>
ClamAV ClamAV 0.95.2/9578/Fri Jul 17 13:22:17 2009<br>
<br>
mysql Ver 14.12 Distrib 5.0.45, for redhat-linux-gnu (i686) using
readline 5.0<br>
<br>
MailWatch 1.0.4<br>
<br>
<u><b>Remarks<br>
<br>
</b></u>So does anyone encountered this problem before ?<br>
<br>
</font></font>
<div class="moz-signature">-- <br>
<title></title>
<font face="Verdana" size="-1">Thanks.<br>
<br>
Mohd Hafiz Ramly<br>
Senior Consultant<br>
<b>Variegate Systems Sdn Bhd</b><br>
Tel : +60 4 2298808<br>
Fax : +60 4 2295006<br>
Mobile : +6 013 4812676<br>
Web : <a class="moz-txt-link-freetext" href="http://www.variegate.biz">http://www.variegate.biz</a><br>
<a href="http://www.variegate.biz/"><img alt="Variegate - Openbravo"
title="Variegate - Openbravo"
src="cid:part1.06020908.05070108@variegate.biz" border="0" height="44"
width="153"></a><a href="http://www.variegate.biz/"><br>
</a></font>
</div>
</body>
</html>