> не уходят и порт 110 как - то мало связаны..
> либо 25-й либо 575й root@mail:/usr/home/admin # /usr/sbin/tcpdump -i re1 -n -nn -ttt 'host 192.168.0.109 and port 25'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on re1, link-type EN10MB (Ethernet), capture size 65535 bytes
00:00:00.000000 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [S], seq 2398195633, win 8192, options [mss 1460,nop,wscale 2,nop,nop,sackOK], length 0
00:00:00.000024 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [S.], seq 1920802920, ack 2398195634, win 65535, options [mss 1460,nop,wscale 6,sackOK,eol], length 0
00:00:00.000125 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], ack 1, win 16425, length 0
00:00:00.000453 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 1:25, ack 1, win 1026, length 24
00:00:00.000616 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 1:14, ack 25, win 16419, length 13
00:00:00.000066 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 25:180, ack 14, win 1026, length 155
00:00:00.000544 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 14:26, ack 180, win 16380, length 12
00:00:00.000087 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 180:198, ack 26, win 1026, length 18
00:00:00.000237 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 26:48, ack 198, win 16375, length 22
00:00:00.000058 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 198:216, ack 48, win 1026, length 18
00:00:00.000231 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 48:66, ack 216, win 16371, length 18
00:00:00.000694 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 216:253, ack 66, win 1026, length 37
00:00:00.000345 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 66:96, ack 253, win 16362, length 30
00:00:00.000384 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 253:267, ack 96, win 1026, length 14
00:00:00.000283 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 96:124, ack 267, win 16358, length 28
00:00:00.000433 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 267:281, ack 124, win 1026, length 14
00:00:00.000323 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 124:130, ack 281, win 16355, length 6
00:00:00.000036 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [P.], seq 281:318, ack 130, win 1026, length 37
00:00:00.000839 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 130:251, ack 318, win 16345, length 121
00:00:00.098005 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 251:1711, ack 318, win 16345, length 1460
00:00:00.000012 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 1711, win 1003, length 0
00:00:00.000002 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 1711:1736, ack 318, win 16345, length 25
00:00:00.000249 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 1736:3179, ack 318, win 16345, length 1443
00:00:00.000010 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 3179, win 1004, length 0
00:00:00.000359 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 3179:4639, ack 318, win 16345, length 1460
00:00:00.000081 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 4639:5632, ack 318, win 16345, length 993
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 5632, win 1011, length 0
00:00:00.000049 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 5632:6341, ack 318, win 16345, length 709
00:00:00.000096 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 6341:7426, ack 318, win 16345, length 1085
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 7426, win 1009, length 0
00:00:00.000292 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 7426:8886, ack 318, win 16345, length 1460
00:00:00.000007 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 8886:8908, ack 318, win 16345, length 22
00:00:00.000006 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 8908, win 1026, length 0
00:00:00.000079 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 8908:9922, ack 318, win 16345, length 1014
00:00:00.000342 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 9922:11326, ack 318, win 16345, length 1404
00:00:00.000007 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 11326, win 1004, length 0
00:00:00.000259 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 11326:12786, ack 318, win 16345, length 1460
00:00:00.000007 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 12786:12808, ack 318, win 16345, length 22
00:00:00.000006 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 12808, win 1026, length 0
00:00:00.000233 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 12808:14268, ack 318, win 16345, length 1460
00:00:00.000010 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 14268:14290, ack 318, win 16345, length 22
00:00:00.000010 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 14290, win 1026, length 0
00:00:00.000003 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 14290:14602, ack 318, win 16345, length 312
00:00:00.000557 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 14602:16062, ack 318, win 16345, length 1460
00:00:00.000015 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 16062, win 1003, length 0
00:00:00.000003 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 16062:16084, ack 318, win 16345, length 22
00:00:00.000006 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 16084:16318, ack 318, win 16345, length 234
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 16318, win 1022, length 0
00:00:00.000560 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 16318:17778, ack 318, win 16345, length 1460
00:00:00.000005 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 17778:17800, ack 318, win 16345, length 22
00:00:00.000005 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 17800, win 1003, length 0
00:00:00.000002 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 17800:19260, ack 318, win 16345, length 1460
00:00:00.000004 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 19260:19282, ack 318, win 16345, length 22
00:00:00.000005 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 19282, win 1003, length 0
00:00:00.000002 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 19282:19516, ack 318, win 16345, length 234
00:00:00.000003 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 19516:19672, ack 318, win 16345, length 156
00:00:00.000005 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 19672, win 1020, length 0
00:00:00.000266 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 19672:21132, ack 318, win 16345, length 1460
00:00:00.000009 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 21132:21154, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 21154, win 1026, length 0
00:00:00.000112 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 21154:22614, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 22614:22636, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 22636, win 1026, length 0
00:00:00.000098 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 22636:23806, ack 318, win 16345, length 1170
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 23806:23962, ack 318, win 16345, length 156
00:00:00.000010 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 23962, win 1024, length 0
00:00:00.000015 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 23962:24118, ack 318, win 16345, length 156
00:00:00.000264 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 24118:25366, ack 318, win 16345, length 1248
00:00:00.000012 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 25366, win 1007, length 0
00:00:00.000009 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 25366:25678, ack 318, win 16345, length 312
00:00:00.000145 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 25678:26614, ack 318, win 16345, length 936
00:00:00.000012 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 26614, win 1011, length 0
00:00:00.000380 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 26614:28074, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 28074:28096, ack 318, win 16345, length 22
00:00:00.000010 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 28096, win 1026, length 0
00:00:00.000003 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 28096:28252, ack 318, win 16345, length 156
00:00:00.000097 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 28252:29344, ack 318, win 16345, length 1092
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 29344, win 1009, length 0
00:00:00.000291 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 29344:30804, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 30804:30826, ack 318, win 16345, length 22
00:00:00.000010 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 30826, win 1026, length 0
00:00:00.000129 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 30826:32152, ack 318, win 16345, length 1326
00:00:00.000050 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 32152:32776, ack 318, win 16345, length 624
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 32776, win 1016, length 0
00:00:00.000276 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 32776:34236, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 34236:34258, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 34258, win 1026, length 0
00:00:00.000150 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 34258:35194, ack 318, win 16345, length 936
00:00:00.000132 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 35194:36442, ack 318, win 16345, length 1248
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 36442, win 1007, length 0
00:00:00.000180 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 36442:37456, ack 318, win 16345, length 1014
00:00:00.000343 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 37456:38916, ack 318, win 16345, length 1460
00:00:00.000014 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 38916, win 1003, length 0
00:00:00.000010 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 38916:38938, ack 318, win 16345, length 22
00:00:00.000053 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 38938:39640, ack 318, win 16345, length 702
00:00:00.000011 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 39640, win 1015, length 0
00:00:00.000173 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 39640:41100, ack 318, win 16345, length 1460
00:00:00.000007 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 41100:41122, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 41122, win 1026, length 0
00:00:00.000270 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 41122:42582, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 42582:42604, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 42604, win 1026, length 0
00:00:00.000273 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [.], seq 42604:44064, ack 318, win 16345, length 1460
00:00:00.000008 IP 192.168.0.109.58608 > 94.159.20.74.25: Flags [P.], seq 44064:44086, ack 318, win 16345, length 22
00:00:00.000009 IP 94.159.20.74.25 > 192.168.0.109.58608: Flags [.], ack 44086, win 1026, length 0