Hi there ... I've a couple of ASA that when scanning, were reporting to have TCP port 110 open
Configuration doesn't allowed that, so even with an explicit ACL entry denying that traffic, port 110 was still responding
I telnet to port 110 to any natted IP or even the physical interface IP on the outside, and TCP connection was established, while at the same time, the logs show "access denied by ACL .etcetc"
So, traffic is denied by ACL, I don't see any connection established on the firewall but even though, the tcp connection handshake goes through and establishes connection against something
What could be happening here?