New answers tagged packet
From the iptables documentation: 6.2 Destination NAT This is done in the PREROUTING chain, just as the packet comes in; this means that anything else on the Linux box itself (routing, packet filtering) will see the packet going to its 'real' destination. It also means that the -i (incoming interface) option can be used. Destination NAT is ...
I found out on my server that the /usr/local/cpanel/scripts/update_spamassassin_config script accesses these whois servers for updating its configuration. Maybe this has to do with spamassassin in which case it is very probably legitimate. If this is running on a server with spamassassin please check its update interval.
Top 50 recent answers are included