PDA

View Full Version : Overnetlite Sending Emails?



leftism
01-11-2004, 03:54 PM
My firewall notified me of overnetlite trying to send an email, so I checked the IP address it was trying to connnect to. I thought it would be the overnet site but it seems to be a home ADSL connection in belgium???


Originally posted by samspade dns lookup+--></div><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (samspade dns lookup)</td></tr><tr><td id='QUOTE'>
nslookup 217.145.37.131
Canonical name: S-37-131.FastADSL.latribu.be
Addresses:
&nbsp; 217.145.37.131
[/b]

<!--QuoteBegin-samspade whois lookup

inetnum:&nbsp; &nbsp; &nbsp; 217.145.37.0 - 217.145.37.255
netname:&nbsp; &nbsp; &nbsp; LATRIBU2
descr:&nbsp; &nbsp; &nbsp; &nbsp; Pymcom/LaTribu ADSL pool
country:&nbsp; &nbsp; &nbsp; BE
admin-c:&nbsp; &nbsp; &nbsp; PG906-RIPE
tech-c:&nbsp; &nbsp; &nbsp; ER666-RIPE
remarks:&nbsp; &nbsp; &nbsp; ---------------------------------------
remarks:&nbsp; &nbsp; &nbsp; You may send all your complaints,
remarks:&nbsp; &nbsp; &nbsp; abuse, spam report to [email protected]
remarks:&nbsp; &nbsp; &nbsp; ---------------------------------------
status:&nbsp; &nbsp; &nbsp; ASSIGNED PA
notify:&nbsp; &nbsp; &nbsp; [email protected]
mnt-by:&nbsp; &nbsp; &nbsp; OPENWEB-MNT
changed:&nbsp; &nbsp; &nbsp; [email protected] 20030602
source:&nbsp; &nbsp; &nbsp; RIPE

route:&nbsp; &nbsp; &nbsp; &nbsp; 217.145.37.0/24
descr:&nbsp; &nbsp; &nbsp; &nbsp; Pymcom/LaTribu ADSL pool
origin:&nbsp; &nbsp; &nbsp; AS20650
notify:&nbsp; &nbsp; &nbsp; [email protected]
mnt-by:&nbsp; &nbsp; &nbsp; OPENWEB-MNT
changed:&nbsp; &nbsp; &nbsp; [email protected] 20030602
source:&nbsp; &nbsp; &nbsp; RIPE

person:&nbsp; &nbsp; &nbsp; Piery GAROT
address:&nbsp; &nbsp; &nbsp; PYMCOM - 1090 Brussels
phone:&nbsp; &nbsp; &nbsp; &nbsp; +32 2 706 56 66
fax-no:&nbsp; &nbsp; &nbsp; +32 2 706 56 66
e-mail:&nbsp; &nbsp; &nbsp; [email protected]
nic-hdl:&nbsp; &nbsp; &nbsp; PG906-RIPE
remarks:
notify:&nbsp; &nbsp; &nbsp; [email protected]
changed:&nbsp; &nbsp; &nbsp; [email protected] 20020720
source:&nbsp; &nbsp; &nbsp; RIPE

person:&nbsp; &nbsp; &nbsp; Roger Emmanuel
address:&nbsp; &nbsp; &nbsp; 4, Rue des Soldats
address:&nbsp; &nbsp; &nbsp; 6536 Thuillies
address:&nbsp; &nbsp; &nbsp; Belgium
phone:&nbsp; &nbsp; &nbsp; &nbsp; +32 476 618538
e-mail:&nbsp; &nbsp; &nbsp; [email protected]
nic-hdl:&nbsp; &nbsp; &nbsp; ER666-RIPE
notify:&nbsp; &nbsp; &nbsp; [email protected]
changed:&nbsp; &nbsp; &nbsp; [email protected] 20021217
source:&nbsp; &nbsp; &nbsp; RIPE
[/quote]

Anyone here know anything about this?

DVD PIRATE III
01-11-2004, 04:06 PM
some overnet clients and emule clients have there ports set to a mail server port rather than the pre-allocated 4662 port which is the default port..
this comes up quite often with Zone Alarm as your firewall..what F/wall are you using?

Hope that helped

leftism
01-11-2004, 04:17 PM
Originally posted by DVD_PIRATE
some overnet clients and emule clients have there ports set to a mail server port rather than the pre-allocated 4662 port which is the default port..
this comes up quite often with Zone Alarm as your firewall..what F/wall are you using?

Hope that helped

Yup I&#39;m using zone alarm. I&#39;ve checked the logs but it doesnt say which port it tried to access. Your probably right though. I know people sometimes have to change their ports to avoid ISP blocking.

Thanks for the help, I&#39;ll calm down with the paranoia now&#33; :lol: