how to monitor pop3 port 110 connection

Hi Guys,

How can i monitor pop3 port 110 connection in my Centos box. I think some one attacking port 110.

How can I prevent the attack. Any tool to see the incoming connection in port 110.


Thanks
Dexter

 

this should work

iptables -I INPUT -p tcp -m tcp --dport 110 -j LOG --log-prefix "POP3:" --log-level 7 --log-tcp-options

now you'll get connection attempts on port 110 in your syslog.

remove it with:

iptables -D INPUT -p tcp -m tcp --dport 110 -j LOG --log-prefix "POP3:" --log-level 7 --log-tcp-options

you could use iptraf as well to see any connections incoming on port 110 as well.

 

Hi,

Thank you for reply.

We are now able to trace who are attacking.


Thank you

Dexter

 

You could also install SNORT (http://www.snort.org/) and check it's intrusion detection reports.