RSYNC to www.nethserver.org

Hi,

In my firewall logs there are about 200 blocked sessions per hour from my nethserver v7 server trying to rsync over port 873 to www.nethserver.org.
It is unclear to my why the system tries to rsync and what data is being transferred. I tried the manuals and the forums, can anyone tell me what this is?

Regards,
Marcel

Hello @maja2020,

do you have the Phone Home usage statistic active?

http://docs.nethserver.org/en/v7/phone_home.html

It could be the antispam rules updater? /cc @filippo_carletti

1 Like

Thx for the replies.
Phone home setting is disabled.
It’s not only www.nethserver.org, but also sanesecurity.cl.cam.ac.uk., postfix.charite.de
This certainly looks like the antispam rules updater.

It is the antivirus rules updater. We host a mirror on www.nethserver.org.
Phone home calls home only once a week and uses https, not rsync.

4 Likes