Domino spoofing?

[lazywriter]

My network admin alerted me that our Domino server is requesting connections to other Domino servers from ports like 1089, 1547 and 2593. My understanding is that Domino normally only uses 1352.

Is this normal, or should is this something I should be worried about? TIA for any clues.

 

[woonjas]

the source port is not fixed, it's the destination port that is. (1352/tcp)

this is normal behaviour

it's the same with your webbrowser, it doesn't try to establish connections to a webserver from port 80 to port 80, it connects to port 80 from any available port above 1024/tcp
Woonjas
IRC: #notes on EFNet