Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Distributed Voicemail Pro Issue

Status
Not open for further replies.

BlueMar

IS-IT--Management
Dec 4, 2013
52
US
Hello Gurus,

I'm having an issue with a VM Pro I have set up as distributed. I have done many of these installation but first time I run into this issue. When I look at the distributed server I see sync master and sync slave attempting to sync. However on the centralized server I don't see the sync master or sync slave attempting to sync. Instead I see several other IP's attempting to connect through port 25 that I have no idea what they are. See below the trace from debug. Any pointers or ideas what the issue can be will be greatly appreciated.

19/09 15:00:00.478 vmprov5s (09,3) f24,1898: SMTPListener: port=25 [TCP] - Connection received from 118.161.245.161:3050
19/09 15:00:00.478 vmprov5s (09,3) f24,1898: To many clients, ignoring request from 118.161.245.161:3050
19/09 15:00:03.080 vmprov5s (09,3) f24,1898: SMTPListener: port=25 [TCP] - Connection received from 118.160.211.68:3793
19/09 15:00:03.080 vmprov5s (09,3) f24,1898: To many clients, ignoring request from 118.160.211.68:3793
19/09 15:00:04.608 vmprov5s (09,3) f24,1898: SMTPListener: port=25 [TCP] - Connection received from 208.117.17.33:43419
19/09 15:00:04.608 vmprov5s (09,3) f24,1898: To many clients, ignoring request from 208.117.17.33:43419
19/09 15:00:04.888 vmprov5s (09,3) f24,1898: SMTPListener: port=25 [TCP] - Connection received from 36.230.253.65:4630
19/09 15:00:04.888 vmprov5s (09,3) f24,1898: To many clients, ignoring request from 36.230.253.65:4630
19/09 15:00:05.159 vmprov5s (09,3) f24,1898: SMTPListener: port=25 [TCP] - Connection received from 114.43.244.240:2315
19/09 15:00:05.159 vmprov5s (09,3) f24,1898: To many clients, ignoring request from 114.43.244.240:2315
19/09 15:00:05.985 vmprov5s (09,3) f24,1940: SMTPSession[TCP 220.141.86.22:1937 [SMTPSession]]: Connection has terminated
19/09 15:00:05.985 vmprov5s (09,5) f24,1940: Terminated worker thread (07E0A9F0) (TID: 1940 (6464)), used by "VMTask[TCP 220.141.86.22:1937 [SMTPSession](0268EC28)]" since 19/09/2014 15:00:05
 
I have seen a PSN on support.avaya regarding the syncing between VM Servers.
Did not really interest me so I only noted there is a PSN but I can't tell any details.
 
Probably some malware or virus on the network looking for open SMTP servers. Is this SMTP server reachable from the internet? It looks like it is. That is bad. It should only be used for internal synching.
Make sure your IIS SMTP only allows relaying from your other smtp servers, and vice versa. Easy enough to setup, really.

-Austin
ACE: Implement IP Office
qrcode.png
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top